CVE-2026-17122

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack-based buffer overflow exploitable remotely without authentication, rated CVSS 9.8 CRITICAL (C/I/A high). IBM has published advisory https://www.ibm.com/support/pages/node/7283858. No exploit code or active exploitation is reported in the provid...

CVE-2026-17121 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-17121

CVE-2026-17121 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A remote attacker can trigger uncontrolled recursion to cause a denial of service , with no authentication or user interaction required. The CVSS 3.1 score is 7.5 (HIGH) with high availability impact. CISA SSVC assesses no known e...

CVE-2026-17120 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a buffer overflow...

CVE-2026-17120

CVE-2026-17120 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where a buffer overflow allows a remote, unauthenticated attacker to cause a denial of service . NVD scores it 7.5 (HIGH) while IBM's CNA rates it 5.3 (MEDIUM) . CISA's SSVC assessment indicates no known exploitation but notes the...

CVE-2026-17118 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability...

CVE-2026-17118

A use-after-free (CWE-416) in AIX 7.2/7.3 and PowerVM VIOS 4.1 enables unauthenticated remote attackers to execute arbitrary code (CVSS 9.8). IBM has published APARs (IJ59563–IJ59566) and cumulative SPs/FPs as fixes, requiring an LPAR reboot. No workarounds are available; no exploitation in the w...

CVE-2026-17060 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read...

CVE-2026-17060

CVE-2026-17060 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where a kernel heap over-read allows a remote attacker to obtain sensitive information and cause a denial of service . The NVD rates this CVSS 9.1 (CRITICAL) with a network vector and no privileges required, while IBM's own scorin...

CVE-2026-17040 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-17040

CVE-2026-17040 is a stack-based buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote attacker to execute arbitrary code without authentication or user interaction. The CVSS 3.1 score is 9.8 (Critical) with a network attack vector and full impact on confidentiality, in...

CVE-2026-17024 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation...

CVE-2026-17024

CVE-2026-17024 affects IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 , where improper certificate validation allows a remote, unauthenticated attacker to execute arbitrary code. NVD scores it 9.8 (CRITICAL) with a network vector, low complexity, and no privileges or user interaction required, whil...

CVE-2026-17009

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a NULL pointer dereference exploitable by a local attacker with low privileges, causing denial of service (CVSS 4.7 MEDIUM). Exploitation requires high complexity; no exploit code or in-the-wild activity is documented. The IBM support reference is prov...

CVE-2026-17009 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17007 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read...

CVE-2026-17007

CVE-2026-17007 is an out-of-bounds read vulnerability affecting IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 . A local attacker with low privileges can exploit it to obtain sensitive information or cause a denial of service . NVD scores it 7.1 (HIGH) with a local attack vector and low privileges ...

CVE-2026-17006 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...

CVE-2026-17006

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 are vulnerable to a heap buffer overflow that allows a remote attacker to execute arbitrary code. The NVD assigns a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, and no privileges or user interaction required. IBM's CNA ra...

CVE-2026-17003

CVE-2026-17003 is an out-of-bounds write vulnerability in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 that allows a remote, unauthenticated attacker to compromise system confidentiality and integrity . The NVD rates it CVSS 9.1 (CRITICAL) with a network vector, low complexity, and no privileges ...