Does v18 have the same RCE hole as V17.5 does?

Is there an update for V18 EAP1 Refresh1? Does v18 have that Remote code Exectution vunerability like v17.5 does which MR9 fixes?