CVE-2026-17160 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation...

CVE-2026-17159

CVE-2026-17159 is an integer overflow vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote attacker to cause a denial of service . The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector requiring no privileges and no user interaction . CISA SSVC assessment indi...

CVE-2026-17152

CVE-2026-17152 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , allowing a remote attacker to execute arbitrary code via a buffer overflow . The vulnerability requires no authentication or user interaction, with a CVSS 3.1 score of 9.8 (CRITICAL) . CISA's SSVC assessment rates it as automatabl...

CVE-2026-17142

CVE-2026-17142 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where an improper authentication flaw allows a remote, unauthenticated attacker to execute arbitrary commands. The CVSS 3.1 score is 9.8 (Critical) with a network vector, low complexity, no privileges or user interaction required,...

CVE-2026-17141 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-17121 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-17121

CVE-2026-17121 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A remote attacker can trigger uncontrolled recursion to cause a denial of service , with no authentication or user interaction required. The CVSS 3.1 score is 7.5 (HIGH) with high availability impact. CISA SSVC assesses no known e...

CVE-2026-17120 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a buffer overflow...

CVE-2026-17120

CVE-2026-17120 is a buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote, unauthenticated attacker to cause a denial of service over the network. The CVSS v3.1 base score is 5.3 (MEDIUM) with low availability impact. CISA SSVC assessment indicates no known exploitatio...

CVE-2026-17060

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain a kernel heap over-read exploitable by an adjacent-network attacker with no privileges, yielding high confidentiality impact and denial of service. CVSS 8.1 HIGH; IBM PSIRT source. No exploitation details or patch versions provided in documents. Moni...

CVE-2026-17040 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-17024 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation...

CVE-2026-17006

CVE-2026-17006 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A heap buffer overflow allows a remote attacker on an adjacent network to execute arbitrary code without authentication or user interaction. The CVSS 3.1 score is 8.3 (HIGH) with a scope change and high impact on confidentiality, ...

CVE-2026-17003 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise the confidentiality and integrity of the system due to an out-of-bounds write...

CVE-2026-16972

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 have an improper authentication flaw allowing unauthenticated remote attackers to obtain sensitive information (CVSS 6.5, MEDIUM). IBM's support page (https://www.ibm.com/support/pages/node/7283858) is the sole reference; no exploitation details or patch ver...

CVE-2026-16972 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication...

CVE-2026-16964

CVE-2026-16964 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The vulnerability stems from the exposure of sensitive information , which allows a remote attacker to intercept messages and forge replies . The CVSS 3.1 base score is 6.5 (MEDIUM) with a network attack vector, low complexity, an...

CVE-2026-16958 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-16958

CVE-2026-16958 is a CWE-787 out-of-bounds write in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1, exploitable via adjacent network with no privileges to cause denial of service (CVSS 6.5, MEDIUM). IBM has released APARs (IJ59563–IJ59566) and corresponding Service/Fix Packs for affected AIX and VIOS levels...

CVE-2026-75484 HTTP/2 header field values containing CR, LF or NUL are passed to the application unvalidated in Bandit

Improper Neutralization of CRLF Sequences 'CRLF Injection' vulnerability in mtrudel bandit allows an unauthenticated remote attacker to smuggle CR, LF, or NUL characters into application-visible request headers via HTTP/2. Bandit.HTTP2.Stream.readheaders/1 validates pseudo-header placement and...