[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-18527":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-28T22:53:37.900Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":468,"aliases":469,"duplicate_of":9,"upstream":470,"downstream":471,"duplicates":472,"related":473,"reserved_at":9,"published_at":474,"modified_at":474,"state":475,"summary":476,"references_raw":483,"kevs":491,"epss":9,"epss_history":492,"metrics":493,"affected":501},"CVE-2026-18527","IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticated profile gaining elevated privileges on the IBM i system.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-384","Session Fixation","Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.","weakness","Incomplete","Compound",[19,159,292,318,322,326,465],{"id":20,"name":21,"techniques":22},"CAPEC-196","Session Credential Falsification through Forging",[23,95,133],{"id":24,"name":25,"tactics":26,"countermeasures":36},"T1134.002","Create Process with Token",[27,30,33],{"id":28,"name":29},"TA0030","Defense Evasion",{"id":31,"name":32},"TA0005","Stealth",{"id":34,"name":35},"TA0111","Privilege Escalation",[37,42,47,52,57,61,66,70,74,78,82,87,91],{"id":38,"name":39,"tactic":40},"D3-ANCI","Authentication Cache Invalidation",{"name":41},"Evict",{"id":43,"name":44,"tactic":45},"D3-CCSA","Credential Compromise Scope Analysis",{"name":46},"Detect",{"id":48,"name":49,"tactic":50},"D3-RIC","Reissue Credential",{"name":51},"Restore",{"id":53,"name":54,"tactic":55},"D3-TB","Token Binding",{"name":56},"Harden",{"id":58,"name":59,"tactic":60},"D3-OPM","Operational Process Monitoring",{"name":46},{"id":62,"name":63,"tactic":64},"D3-CTS","Credential Transmission Scoping",{"name":65},"Isolate",{"id":67,"name":68,"tactic":69},"D3-TBA","Token-based Authentication",{"name":56},{"id":71,"name":72,"tactic":73},"D3-CH","Credential Hardening",{"name":56},{"id":75,"name":76,"tactic":77},"D3-MFA","Multi-factor Authentication",{"name":56},{"id":79,"name":80,"tactic":81},"D3-AEM","Application Exception Monitoring",{"name":46},{"id":83,"name":84,"tactic":85},"D3-DUC","Decoy User Credential",{"name":86},"Deceive",{"id":88,"name":89,"tactic":90},"D3-CRO","Credential Rotation",{"name":56},{"id":92,"name":93,"tactic":94},"D3-CR","Credential Revocation",{"name":41},{"id":96,"name":97,"tactics":98,"countermeasures":102},"T1134.003","Make and Impersonate Token",[99,100,101],{"id":28,"name":29},{"id":31,"name":32},{"id":34,"name":35},[103,105,107,109,111,113,115,117,119,121,123,125,129,131],{"id":79,"name":80,"tactic":104},{"name":46},{"id":75,"name":76,"tactic":106},{"name":56},{"id":67,"name":68,"tactic":108},{"name":56},{"id":88,"name":89,"tactic":110},{"name":56},{"id":62,"name":63,"tactic":112},{"name":65},{"id":92,"name":93,"tactic":114},{"name":41},{"id":58,"name":59,"tactic":116},{"name":46},{"id":83,"name":84,"tactic":118},{"name":86},{"id":53,"name":54,"tactic":120},{"name":56},{"id":48,"name":49,"tactic":122},{"name":51},{"id":43,"name":44,"tactic":124},{"name":46},{"id":126,"name":127,"tactic":128},"D3-ST","Session Termination",{"name":41},{"id":38,"name":39,"tactic":130},{"name":41},{"id":71,"name":72,"tactic":132},{"name":56},{"id":134,"name":135,"tactics":136,"countermeasures":140},"T1606","Forge Web Credentials",[137],{"id":138,"name":139},"TA0031","Credential Access",[141,143,145,147,149,151,153,155,157],{"id":83,"name":84,"tactic":142},{"name":86},{"id":43,"name":44,"tactic":144},{"name":46},{"id":38,"name":39,"tactic":146},{"name":41},{"id":62,"name":63,"tactic":148},{"name":65},{"id":71,"name":72,"tactic":150},{"name":56},{"id":88,"name":89,"tactic":152},{"name":56},{"id":75,"name":76,"tactic":154},{"name":56},{"id":92,"name":93,"tactic":156},{"name":41},{"id":48,"name":49,"tactic":158},{"name":51},{"id":160,"name":161,"techniques":162},"CAPEC-21","Exploitation of Trusted Identifiers",[163,240,268],{"id":164,"name":165,"tactics":166,"countermeasures":170},"T1134","Access Token Manipulation",[167,168,169],{"id":28,"name":29},{"id":31,"name":32},{"id":34,"name":35},[171,173,175,177,181,183,185,187,192,194,196,200,202,204,206,208,212,214,218,222,226,228,232,236],{"id":62,"name":63,"tactic":172},{"name":65},{"id":43,"name":44,"tactic":174},{"name":46},{"id":58,"name":59,"tactic":176},{"name":46},{"id":178,"name":179,"tactic":180},"D3-PSA","Process Spawn Analysis",{"name":46},{"id":126,"name":127,"tactic":182},{"name":41},{"id":92,"name":93,"tactic":184},{"name":41},{"id":38,"name":39,"tactic":186},{"name":41},{"id":188,"name":189,"tactic":190},"D3-CI","Configuration Inventory",{"name":191},"Model",{"id":83,"name":84,"tactic":193},{"name":86},{"id":71,"name":72,"tactic":195},{"name":56},{"id":197,"name":198,"tactic":199},"D3-HBPI","Hardware-based Process Isolation",{"name":65},{"id":75,"name":76,"tactic":201},{"name":56},{"id":88,"name":89,"tactic":203},{"name":56},{"id":53,"name":54,"tactic":205},{"name":56},{"id":67,"name":68,"tactic":207},{"name":56},{"id":209,"name":210,"tactic":211},"D3-RC","Restore Configuration",{"name":51},{"id":48,"name":49,"tactic":213},{"name":51},{"id":215,"name":216,"tactic":217},"D3-NTPM","Network Traffic Policy Mapping",{"name":191},{"id":219,"name":220,"tactic":221},"D3-AM","Access Modeling",{"name":191},{"id":223,"name":224,"tactic":225},"D3-SCF","System Call Filtering",{"name":65},{"id":79,"name":80,"tactic":227},{"name":46},{"id":229,"name":230,"tactic":231},"D3-SCA","System Call Analysis",{"name":46},{"id":233,"name":234,"tactic":235},"D3-EAL","Executable Allowlisting",{"name":65},{"id":237,"name":238,"tactic":239},"D3-EDL","Executable Denylisting",{"name":65},{"id":241,"name":242,"tactics":243,"countermeasures":245},"T1528","Steal Application Access Token",[244],{"id":138,"name":139},[246,248,250,252,254,256,258,260,262,264,266],{"id":88,"name":89,"tactic":247},{"name":56},{"id":71,"name":72,"tactic":249},{"name":56},{"id":43,"name":44,"tactic":251},{"name":46},{"id":53,"name":54,"tactic":253},{"name":56},{"id":83,"name":84,"tactic":255},{"name":86},{"id":67,"name":68,"tactic":257},{"name":56},{"id":75,"name":76,"tactic":259},{"name":56},{"id":92,"name":93,"tactic":261},{"name":41},{"id":48,"name":49,"tactic":263},{"name":51},{"id":62,"name":63,"tactic":265},{"name":65},{"id":38,"name":39,"tactic":267},{"name":41},{"id":269,"name":270,"tactics":271,"countermeasures":273},"T1539","Steal Web Session Cookie",[272],{"id":138,"name":139},[274,276,278,280,282,284,286,288,290],{"id":43,"name":44,"tactic":275},{"name":46},{"id":48,"name":49,"tactic":277},{"name":51},{"id":88,"name":89,"tactic":279},{"name":56},{"id":38,"name":39,"tactic":281},{"name":41},{"id":92,"name":93,"tactic":283},{"name":41},{"id":83,"name":84,"tactic":285},{"name":86},{"id":62,"name":63,"tactic":287},{"name":65},{"id":71,"name":72,"tactic":289},{"name":56},{"id":75,"name":76,"tactic":291},{"name":56},{"id":293,"name":294,"techniques":295},"CAPEC-31","Accessing/Intercepting/Modifying HTTP Cookies",[296],{"id":269,"name":270,"tactics":297,"countermeasures":299},[298],{"id":138,"name":139},[300,302,304,306,308,310,312,314,316],{"id":43,"name":44,"tactic":301},{"name":46},{"id":48,"name":49,"tactic":303},{"name":51},{"id":88,"name":89,"tactic":305},{"name":56},{"id":38,"name":39,"tactic":307},{"name":41},{"id":92,"name":93,"tactic":309},{"name":41},{"id":83,"name":84,"tactic":311},{"name":86},{"id":62,"name":63,"tactic":313},{"name":65},{"id":71,"name":72,"tactic":315},{"name":56},{"id":75,"name":76,"tactic":317},{"name":56},{"id":319,"name":320,"techniques":321},"CAPEC-39","Manipulating Opaque Client-based Data Tokens",[],{"id":323,"name":324,"techniques":325},"CAPEC-59","Session Credential Falsification through Prediction",[],{"id":327,"name":328,"techniques":329},"CAPEC-60","Reusing Session IDs (aka Session Replay)",[330,360],{"id":331,"name":332,"tactics":333,"countermeasures":337},"T1134.001","Token Impersonation/Theft",[334,335,336],{"id":28,"name":29},{"id":31,"name":32},{"id":34,"name":35},[338,340,342,344,346,348,350,352,354,356,358],{"id":75,"name":76,"tactic":339},{"name":56},{"id":83,"name":84,"tactic":341},{"name":86},{"id":48,"name":49,"tactic":343},{"name":51},{"id":62,"name":63,"tactic":345},{"name":65},{"id":53,"name":54,"tactic":347},{"name":56},{"id":92,"name":93,"tactic":349},{"name":41},{"id":38,"name":39,"tactic":351},{"name":41},{"id":71,"name":72,"tactic":353},{"name":56},{"id":67,"name":68,"tactic":355},{"name":56},{"id":88,"name":89,"tactic":357},{"name":56},{"id":43,"name":44,"tactic":359},{"name":46},{"id":361,"name":362,"tactics":363,"countermeasures":368},"T1550.004","Web Session Cookie",[364,365],{"id":28,"name":29},{"id":366,"name":367},"TA0109","Lateral Movement",[369,371,375,377,381,385,389,393,397,399,403,405,409,413,415,419,423,427,431,433,437,441,443,447,449,453,455,457,459,461],{"id":197,"name":198,"tactic":370},{"name":65},{"id":372,"name":373,"tactic":374},"D3-PLA","Process Lineage Analysis",{"name":46},{"id":92,"name":93,"tactic":376},{"name":41},{"id":378,"name":379,"tactic":380},"D3-CSPP","Client-server Payload Profiling",{"name":46},{"id":382,"name":383,"tactic":384},"D3-HR","Host Reboot",{"name":41},{"id":386,"name":387,"tactic":388},"D3-NTSA","Network Traffic Signature Analysis",{"name":46},{"id":390,"name":391,"tactic":392},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":46},{"id":394,"name":395,"tactic":396},"D3-APCA","Application Protocol Command Analysis",{"name":46},{"id":43,"name":44,"tactic":398},{"name":46},{"id":400,"name":401,"tactic":402},"D3-NTCD","Network Traffic Community Deviation",{"name":46},{"id":88,"name":89,"tactic":404},{"name":56},{"id":406,"name":407,"tactic":408},"D3-PS","Process Suspension",{"name":41},{"id":410,"name":411,"tactic":412},"D3-KBPI","Kernel-based Process Isolation",{"name":65},{"id":223,"name":224,"tactic":414},{"name":65},{"id":416,"name":417,"tactic":418},"D3-PT","Process Termination",{"name":41},{"id":420,"name":421,"tactic":422},"D3-HS","Host Shutdown",{"name":41},{"id":424,"name":425,"tactic":426},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":46},{"id":428,"name":429,"tactic":430},"D3-PSMD","Process Self-Modification Detection",{"name":46},{"id":83,"name":84,"tactic":432},{"name":86},{"id":434,"name":435,"tactic":436},"D3-WSAM","Web Session Access Mediation",{"name":65},{"id":438,"name":439,"tactic":440},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":46},{"id":71,"name":72,"tactic":442},{"name":56},{"id":444,"name":445,"tactic":446},"D3-ABPI","Application-based Process Isolation",{"name":65},{"id":48,"name":49,"tactic":448},{"name":51},{"id":450,"name":451,"tactic":452},"D3-RTSD","Remote Terminal Session Detection",{"name":46},{"id":62,"name":63,"tactic":454},{"name":65},{"id":38,"name":39,"tactic":456},{"name":41},{"id":75,"name":76,"tactic":458},{"name":56},{"id":178,"name":179,"tactic":460},{"name":46},{"id":462,"name":463,"tactic":464},"D3-NTF","Network Traffic Filtering",{"name":65},{"id":466,"name":13,"techniques":467},"CAPEC-61",[],[],[],[],[],[],[],"2026-08-28T20:48:33.957Z","Received",{"cisa_kev":477,"cisa_ransomware":477,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":478,"severity_score":479,"severity_version":480,"severity_source":481,"severity_vector":482,"severity_status":475},false,"critical",9.9,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",[484],{"url":485,"sources":486,"tags":488},"https://www.ibm.com/support/pages/node/7284580",[481,487],"nvd",[489,490],"Vendor Advisory","Patch",[],[],[494,499],{"source":481,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":495,"cvss_v4_0":9},{"baseScore":479,"baseSeverity":496,"vectorString":482,"impactScore":497,"exploitabilityScore":498},"CRITICAL",10,7.9,{"source":487,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":500,"cvss_v4_0":9},{"baseScore":479,"baseSeverity":496,"vectorString":482,"impactScore":497,"exploitabilityScore":498},[502],{"ecosystem":9,"name":503,"vendor":504,"product":505,"cpe_part":506,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":507},"Administration Runtime Expert for i","ibm","administration runtime expert for i","a",[508],{"version":509,"is_range":477,"range_type":481,"version_start":509,"version_start_type":510,"version_end":509,"version_end_type":510,"fixed_in":9},"1R1M0","including"]