CVE-2026-18511

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6

Description Improper bounds checking during TLS session establishment in the Native IBM i JSSE provider allows a local authenticated attacker to generate a stack-based buffer overflow. This occurs when a fixed-length buffer is overflowed, potentially leading to arbitrary code execution on the system or a crash of the JVM (Java Virtual Machine) process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.