VulnSocial

CVE-2026-18527Disclosure

LOWCVSS 9.9 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticated profile gaining elevated privileges on the IBM i system.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-384

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 4 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 4 mentions (2026-08-29); latest day: 1
  • 5 total mentions across 2 days

Deep dive

Activity timeline5 mentions / 2d
01234Mentions · 2026-08-29: 4Mentions · 2026-08-31: 1PoC Mentioned / Linked · 2026-08-29: 1Technical Details · 2026-08-29: 1Technical Details · 2026-08-31: 108-2908-31
Signal classification2 categories
Disclosure
480.0%
General
120.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-294
Disclosure3General1
2026-08-311
Disclosure1
Full discourse5 posts
  • CCB Alert@CCBalert
    Disclosure

    Warning: Critical Privilege Escalation in #IBMi Administration Runtime Expert. CVE-2026-18527 CVSS: 9.9. This flaw can lead to unauthorized elevated privileges. #Patch #Patch #Patch

    Post summary

    The post announces a high‑severity privilege escalation issue (CVE‑2026‑18527, CVSS 9.9) in IBM i Administration Runtime Expert, warning of potential unauthorized privilege gains without providing PoC, exploit, or patch details.

    02000378
    7.2K followersView on X
  • ExploitGrid@exploitgrid
    Disclosure

    [CVE] CVE-2026-18527 [HIGH PRIORITY] #IBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gainin... 🔗 https://exploitgrid.net/cve/CVE-2026-18527

    Post summary

    The entry announces CVE‑2026‑18527, marks it high priority, and links to a site that likely hosts a PoC, but provides no detailed technical, exploit, or mitigation information.

    1000037
    38 followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️ ExploitGrid Daily Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-19295 - EXPLOIT CVE-2026-54745 CVE-2026-82222 CVE-2026-18527 CVE-2026-55565 ..🧵👇

    Post summary

    A daily digest lists several CVEs, with one marked as an exploit, but no additional details, tools, or mitigation information are supplied.

    1000078
    38 followersView on X
  • ADK Cyber@ADKCyber
    Disclosure

    IBM ARE for i has CVSS 9.9 remote privilege escalation via GUI component. Check exposure: https://nvd.nist.gov/vuln/detail/CVE-2026-18527 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/xfEal9Hvq2

    Post summary

    The tweet announces CVE-2026-18527, a high‑severity 9.9 remote privilege‑escalation vulnerability involving a GUI component, with no PoC, exploit, or patch details provided.

    0000046
    95 followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    We have just added an important vulnerability affecting IBM Administration Runtime Expert for i (CVE-2026-18527) https://vuldb.com/vuln/396925

    Post summary

    An important vulnerability (CVE-2026-18527) affecting IBM Administration Runtime Expert for i has been added to the vuldb database.

    00000151
    2.3K followersView on X

Explore more

Back to dashboard