CVE-2026-16928

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain a heap-based buffer overflow exploitable remotely without authentication, causing denial of service (CVSS 7.5 HIGH, impact limited to availability). IBM's support page is linked as the primary reference. No exploitation or patch details are provided ...

EUVD-2026-63387

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16927 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16927

A TOCTOU race condition in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local attacker with low privileges to escalate to root, yielding full confidentiality, integrity, and availability impact (CVSS 7.3 HIGH). CISA reports no known exploitation. IBM's fix is documented at https://www.ibm.com/su...

CVE-2026-16926

CVE-2026-16926 is classified as CWE-73 (External Control of File Name or Path) in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1, allowing a remote unauthenticated attacker to overwrite arbitrary files. Fixes are available via AIX Service Packs (7.2 TL05 SP13, 7.3 TL02 SP05, TL03 SP03, TL04 SP02) and V...

CVE-2026-16926 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input...

EUVD-2026-63386

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input...

EUVD-2026-63385

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization...

CVE-2026-16925 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization...

CVE-2026-16925

CVE-2026-16925 is a privilege escalation vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , caused by improper authorization . A local attacker with low privileges can escalate to higher privileges, resulting in high impact on integrity and availability (CVSS 3.1: 7.1 HIGH ). CISA SSVC ...

CVE-2026-16924 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation...

EUVD-2026-63384

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation...

CVE-2026-16924

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain a flaw in IPsec decapsulation where improper memory offset calculation allows a remote, unauthenticated attacker to trigger a denial of service (CVSS 7.5 HIGH). No exploitation or patch details are provided in the documents; a reference link to IBM s...

EUVD-2026-63383

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-16923

CVE-2026-16923 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where improper privilege management allows a local attacker with low privileges to gain elevated access, resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH ). The attack requires local...

CVE-2026-16923 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-16922

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 are affected by a TOCTOU race condition exploitable by a local attacker with low privileges, enabling arbitrary code execution with high confidentiality, integrity, and availability impact (CVSS 7.0). Exploitation details are not provided. IBM reference: htt...

CVE-2026-16922 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use TOCTOU race condition...

EUVD-2026-63382

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use TOCTOU race condition...

PT-2026-79177

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Improper certificate validation may allow a remote attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that...