CVE-2026-18527

Critical

Description

IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticated profile gaining elevated privileges on the IBM i system.

SeverityCritical

CVSS9.9

Exploit probability—

Product

Ibm Administration Runtime Expert For I

PublishedAug 28, 2026

First seenAug 28, 2026

Weakness typeCWE-384CWE-384

How to fix

Patches

ibm.com/support/pages/node/7284580

Affected products

Product	Affected versions	Fixed in
ibm administration_runtime_expert_for_i	1R1M0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.