IBM Administration Runtime Expert For I vulnerabilities

2 CVEs affecting IBM Administration Runtime Expert For I, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-18527, published 2026-08-28.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-17203, published 2026-08-28. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Administration Runtime Expert for i 1R1M0 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement.
• CVE-2026-18527, published 2026-08-28. Critical severity, CVSS 9.9. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An…