CVE-2026-16872

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack-based buffer overflow exploitable over the network with no authentication, allowing arbitrary code execution (CVSS 9.8 Critical). IBM's support page is the primary reference; no exploit code or in-the-wild activity is documented. No patch detai...

CVE-2026-16869 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables...

EUVD-2026-62755

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables...

EUVD-2026-62752

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection...

CVE-2026-16865

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a command injection flaw allowing unauthenticated remote attackers (CVSS 8.8, HIGH) to execute arbitrary code with full confidentiality, integrity, and availability impact. Exploitation details are not provided. Refer to IBM support page for patch info...

EUVD-2026-62751

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...

CVE-2026-16862

CVE-2026-16862 is a critical (CVSS 9.8) stack buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote, unauthenticated attacker to execute arbitrary code over the network with no user interaction. CISA SSVC assessment rates it as automatable with total technical impact ,...

EUVD-2026-62750

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...

CVE-2026-16862 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...

CVE-2026-16850 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements...

CVE-2026-16848 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP options...

CVE-2026-16845 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...

GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates

Summary A server-side template injection SSTI vulnerability exist that allows an authenticated administrator to upload FreeMarker templates containing malicious content that can execute OS commands and read from or write to arbitrary files on the server. These FreeMarker templates are used in a...

GHSA-WF6J-GR27-G7CH GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates

Summary A server-side template injection SSTI vulnerability exist that allows an authenticated administrator to upload FreeMarker templates containing malicious content that can execute OS commands and read from or write to arbitrary files on the server. These FreeMarker templates are used in a...

CVE-2026-16841 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...

EUVD-2026-62730

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can exploit this vulnerability,...

CVE-2026-16661

CVE-2026-16661 affects the IBM PowerVM Hypervisor service processor mailbox interface across multiple firmware versions (FW950.00–FW950.H2, FW1060.00–FW1060.80, FW1110.00–FW1110.30, and FW1120.00). The root cause is an integer overflow (CWE-190). An attacker with authenticated service-level acces...

EUVD-2026-62729

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write...

CVE-2026-16840

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 have a remote, unauthenticated out-of-bounds write enabling arbitrary code execution (CVSS 9.8 critical). IBM's support page (https://www.ibm.com/support/pages/node/7283858) is the referenced advisory; no patch version or exploit details are provided in the ...

CVE-2026-19508

A heap-based buffer overflow in jst_post.c (multipart form-data parser) in RDK-B WebUI version rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to send a crafted multipart/form-data request, causing memory corruption, denial of service, and potentially arbitrary code execut...