107307 matches found
CVE-2026-16851 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free...
EUVD-2026-62745
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements...
CVE-2026-16850
IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1, are vulnerable to command injection via crafted Router Advertisements, enabling remote arbitrary code execution with HIGH severity (CVSS 8.8). Exploitation details are not provided in the documents; refer to the IBM support advisory for patch information.
CVE-2026-16850 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements...
CVE-2026-16850 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements...
CVE-2026-16849 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper check for an array index boundary...
EUVD-2026-62744
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper check for an array index boundary...
CVE-2026-16849
IBM's security bulletin confirms CVE-2026-16849 is classified as CWE-129: Improper Validation of Array Index . Affected products are AIX 7.2/7.3 and PowerVM VIOS 4.1 (fileset bos.mp64). IBM has issued APARs (IJ59563–IJ59566) and Service Packs (AIX 7.2 TL05 SP13, 7.3 TL02 SP5/TL03 SP3/TL04 SP2; VI...
CVE-2026-16849 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper check for an array index boundary...
CVE-2026-18871
IBM PowerVM Hypervisor firmware (FW1060.00–FW1060.80, FW1110.00–FW1110.30, FW1120.00) is affected by CWE-121 stack-based buffer overflow in host firmware configuration parsing. An authenticated service-processor attacker can crash the boot stack with memory corruption. No workarounds exist; affec...
CVE-2026-18871 Power System Buffer Overflow
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causin...
CVE-2026-18871 Power System Buffer Overflow
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causin...
EUVD-2026-62742
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP options...
CVE-2026-16848 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP options...
CVE-2026-16848 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP options...
CVE-2026-16848
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to remote arbitrary command execution via improper neutralization of shell metacharacters in DHCP options. An unauthenticated attacker on an adjacent network can inject malicious shell characters through DHCP option fields, achieving full confid...
CVE-2026-17414 Power System Improper Input Validation
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition...
EUVD-2026-62739
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition...
CVE-2026-16847
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have a heap buffer overflow allowing unauthenticated adjacent-network attackers to execute arbitrary code (CVSS 8.8 HIGH, C/I/A impact). IBM's support page (linked) provides remediation details; no in-the-wild exploitation is reported in the provided documents.