EUVD-2026-62825

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16891

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are affected by CWE-125 out-of-bounds read in the bos.mp64 kernel fileset, allowing a local attacker to obtain sensitive information (CVSS 3.3, LOW). IBM has released APARs (IJ59566–IJ59563) available via Service Packs/SP13–SP02 for AIX and Fix Packs 4.1.0.50–...

CVE-2026-16890

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain an integer overflow exploitable by a local attacker with low privileges (CVSS 3.6, LOW) to obtain sensitive information or cause denial of service. IBM's support page (https://www.ibm.com/support/pages/node/7283858) is the primary reference; no exploit...

CVE-2026-16890 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow...

EUVD-2026-62861

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow...

EUVD-2026-62863

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a path traversal vulnerability...

CVE-2026-16888

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 have a path traversal flaw allowing remote attackers to read sensitive data. CVSS 3.7 (Low) reflects high complexity and no privileges required. IBM provides a support advisory at the referenced URL. No exploitation evidence is reported in the provided docum...

CVE-2026-16888 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a path traversal vulnerability...

CVE-2026-16883

CVE-2026-16883 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where an out-of-bounds read allows a local attacker with low privileges to obtain sensitive information. The CVSS 3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high confidentiality impa...

CVE-2026-16883 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

EUVD-2026-62869

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

MINI-89CG-HJ9F-5W3X

Bulletin has no description...

MINI-FVH4-M3GX-4287

Bulletin has no description...

MINI-J7P4-V6JW-V68R

Bulletin has no description...

CVE-2026-74485

A flaw was found in the binfmtmisc component of the Linux kernel. An unprivileged local user, operating within a user namespace, could exploit this vulnerability. By registering a binfmtmisc string where the chosen delimiter character is also a flag character, the system's flag field parser can...

Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET

Impact Any activated account in a company can read every maintenance record for that company asset tag, supplier, purchase cost, free-text notes, dates without holding any asset or maintenance permission. Summary MaintenancesController::show renders a maintenance record without any authorization...

GHSA-R9R3-G9FP-3Q4Q Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET

Impact Any activated account in a company can read every maintenance record for that company asset tag, supplier, purchase cost, free-text notes, dates without holding any asset or maintenance permission. Summary MaintenancesController::show renders a maintenance record without any authorization...

Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

Impact An attacker can completely bypass file-name randomization security and without authorization download confidential, signed EULA files belonging to any other user across the application. Steps to Reproduce: 1. Log in as a restricted user. 2. Send a GET request to /api/v1/users/targetid/eula...

GHSA-3HGV-JR5J-CG9X Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

Impact An attacker can completely bypass file-name randomization security and without authorization download confidential, signed EULA files belonging to any other user across the application. Steps to Reproduce: 1. Log in as a restricted user. 2. Send a GET request to /api/v1/users/targetid/eula...

CVE-2026-16839

Affected products: IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1. Root cause: integer underflow in the IPv4 IP-options parser, exploitable remotely with no authentication. Impact: CVSS 9.4 (Critical) — high integrity/availability, low confidentiality. Exploitation status: no in-the-wild exploitation or ...