CVE-2026-18847

IBM i versions 7.6, 7.5, 7.4, and 7.3 are vulnerable to a spoofing attack that enables remote unauthenticated attackers to harvest user credentials through the Navigator for i interface. The high severity of this vulnerability (CVSS 8.8) necessitates immediate attention from organizations using these IBM i systems to mitigate potential credential theft and unauthorized access. System administrators and security teams should prioritize patching and implementing security measures to protect against this threat.