CVE-2026-16829

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-16831

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-16824

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to unbounded recursion...

CVE-2026-16724

IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface VMI. An attacker with authenticated administrator-level access can cause the VMI to crash. Th...

CVE-2026-16822

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy server and modify traffic due to improper certificate validation...

CVE-2026-16661

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can exploit this vulnerability,...

EUVD-2026-62845

IBM PowerVM Hypervisor Platform KeyStore PKS and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could...

CVE-2026-4936

IBM PowerVM Hypervisor PKS and virtual TPM firmware (FW1110.00–.20, FW1060.00–.71, FW950.00–.H2) use weak persistent storage key seeds (CWE-331), allowing an attacker with service processor or HMC access to derive AES keys. Patch to FW1110.30, FW1060.72/80, or FW950.H3, then run sbmgr -regenerate...

CVE-2026-4937 Power System Insufficient Entropy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...

EUVD-2026-62842

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...

CVE-2026-16919 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers...

EUVD-2026-62835

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers...

CVE-2026-16919 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers...

CVE-2026-16919

CVE-2026-16919 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The root cause is improper validation of network-supplied pointers , allowing a remote, unauthenticated attacker to execute arbitrary code over the network. The CVSS 3.1 score is 9.8 (CRITICAL) with full impact on confidentiality,...

CVE-2026-16917 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow...

CVE-2026-16917 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow...

EUVD-2026-62834

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow...

CVE-2026-16917

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain an integer overflow exploitable by a remote, unauthenticated attacker for arbitrary code execution. CVSS 9.8 (Critical) reflects full confidentiality, integrity, and availability impact. IBM's advisory is linked in references; no exploitation details...

CVE-2026-16914 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write...

CVE-2026-16914

CVE-2026-16914 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where an out-of-bounds write allows a local attacker with high privileges to execute arbitrary code. The CVSS 3.1 score is 6.7 (Medium) with full impact on confidentiality, integrity, and availability. CISA's SSVC assessment indic...