CVE-2026-16997 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management...

CVE-2026-16997

CVE-2026-16997 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A local attacker with no privileges but requiring user interaction can execute arbitrary commands due to improper privilege management , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.8 H...

CVE-2026-16996 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow...

CVE-2026-16996

CVE-2026-16996 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The vulnerability is an integer underflow that allows a local attacker with low privileges to execute arbitrary code , with changed scope and high impact on confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ). CISA ...

CVE-2026-16991

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to local privilege escalation caused by improper handling of symbolic links; a low-privilege local attacker can exploit this to gain full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH). No exploit or patch details are provid...

CVE-2026-16989

CVE-2026-16989 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where improper resolution of symbolic links allows a local attacker with low privileges to gain elevated privileges (high impact on confidentiality and integrity, no availability impact). The CVSS 3.1 score is 7.1 (HIGH) with a lo...

CVE-2026-16989 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper resolution of symbolic links...

CVE-2026-16980

CVE-2026-16980 affects IBM AIX 7.2 and 7.3 as well as IBM PowerVM VIOS 4.1 . The vulnerability stems from improper validation of symbolic links , allowing a local attacker with low privileges to cause a denial of service . The CVSS 3.1 base score is 6.3 (Medium) , with high attack complexity and ...

CVE-2026-16980 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper validation of symbolic links...

CVE-2026-16973

CVE-2026-16973 is an out-of-bounds read vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker with low privileges to disclose sensitive kernel memory . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector and no user interaction required. CISA SSVC asses...

CVE-2026-16973 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read...

CVE-2026-16972

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 have an improper authentication flaw allowing unauthenticated remote attackers to obtain sensitive information (CVSS 6.5, MEDIUM). IBM's support page (https://www.ibm.com/support/pages/node/7283858) is the sole reference; no exploitation details or patch ver...

CVE-2026-16972 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication...

CVE-2026-16964

CVE-2026-16964 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The vulnerability stems from the exposure of sensitive information , which allows a remote attacker to intercept messages and forge replies . The CVSS 3.1 base score is 6.5 (MEDIUM) with a network attack vector, low complexity, an...

CVE-2026-16958 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-16958

CVE-2026-16958 is a CWE-787 out-of-bounds write in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1, exploitable via adjacent network with no privileges to cause denial of service (CVSS 6.5, MEDIUM). IBM has released APARs (IJ59563–IJ59566) and corresponding Service/Fix Packs for affected AIX and VIOS levels...

CVE-2026-16952

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to local denial of service via uncontrolled resource consumption (CVSS 5.5, LOW privileges required). No specific component, root cause, patch version, or exploit details are provided in the documents. Monitor IBM PSIRT advisories for remediatio...

CVE-2026-16952 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-16951

A heap-based buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local authenticated attacker to execute arbitrary code. CVSS 6.7 (MEDIUM) reflects the high privileges required. No exploit or patch details are provided in the documents. The IBM support page (linked in references) sho...

CVE-2026-16951 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow...