635 matches found
EUVD-2026-62732
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-16842 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-16841 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...
EUVD-2026-62731
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...
CVE-2026-16841
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack buffer overflow exploitable by a remote, unauthenticated attacker on an adjacent network, yielding arbitrary code execution with HIGH confidentiality, integrity, and availability impact (CVSS 8.8). IBM reference: https://www.ibm.com/support/pag...
CVE-2026-16840 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write...
EUVD-2026-62729
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write...
CVE-2026-16840
IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 have a remote, unauthenticated out-of-bounds write enabling arbitrary code execution (CVSS 9.8 critical). IBM's support page (https://www.ibm.com/support/pages/node/7283858) is the referenced advisory; no patch version or exploit details are provided in the ...
CVE-2026-16839
Affected products: IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1. Root cause: integer underflow in the IPv4 IP-options parser, exploitable remotely with no authentication. Impact: CVSS 9.4 (Critical) — high integrity/availability, low confidentiality. Exploitation status: no in-the-wild exploitation or ...
CVE-2026-16839 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...
EUVD-2026-62728
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...
EUVD-2026-62727
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check to time-of-use TOCTOU race condition...
CVE-2026-16838
CVE-2026-16838 is a TOCTOU race condition in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker to overwrite critical files and obtain sensitive information. The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high complexity but f...
CVE-2026-16838 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check to time-of-use TOCTOU race condition...
EUVD-2026-62726
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper handling of a missing SSL client certificate...
CVE-2026-16837
IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1, mishandle a missing SSL client certificate, allowing an unauthenticated remote attacker to trigger denial of service. CVSS 3.1 scores this HIGH (7.5), with no confidentiality or integrity impact. No patch or exploitation details are provided in the docum...
CVE-2026-16837 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper handling of a missing SSL client certificate...
CVE-2026-16836 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
CVE-2026-16836
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to denial of service via uncontrolled resource consumption; a remote attacker with no authentication can trigger full availability impact (CVSS 7.5 HIGH, AV:N/AC:L/PR:N/UI:N/A:H). Exploitation status is not provided in the documents; monitor the...