1066 matches found
CVE-2026-16707
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox...
CVE-2026-16824
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to unbounded recursion...
CVE-2026-16661
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can exploit this vulnerability,...
CVE-2026-4936 Power System Insufficient Entropy
IBM PowerVM Hypervisor Platform KeyStore PKS and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could...
CVE-2026-4936
IBM PowerVM Hypervisor PKS and virtual TPM firmware (FW1110.00–.20, FW1060.00–.71, FW950.00–.H2) use weak persistent storage key seeds (CWE-331), allowing an attacker with service processor or HMC access to derive AES keys. Patch to FW1110.30, FW1060.72/80, or FW950.H3, then run sbmgr -regenerate...
EUVD-2026-62845
IBM PowerVM Hypervisor Platform KeyStore PKS and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could...
CVE-2026-4937
IBM PowerVM Hypervisor (FW1110.00–FW1110.20, FW1060.00–FW1060.71, FW950.00–FW950.H2) is vulnerable to insufficient entropy (CWE-331) in certain hypervisor calls, allowing a local attacker with administrative privileges to decrypt encrypted data. The CVSS 3.1 score is 5.3 (Medium) with a local att...
CVE-2026-4937 Power System Insufficient Entropy
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...
EUVD-2026-62842
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...
CVE-2026-16707
IBM PowerVM Hypervisor firmware (FW1120.00, FW1110.00–FW1110.30, FW1060.00–FW1060.80, FW950.00–FW950.H2) is vulnerable to an out-of-bounds read (CWE-125) in the service processor mailbox interface . An attacker with authenticated service-level access to the FSP can send a crafted mailbox message ...
CVE-2026-16707 Power System Out-of-bounds Read
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox...
EUVD-2026-62840
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox...
EUVD-2026-62835
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers...
CVE-2026-16919 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers...
CVE-2026-16919
CVE-2026-16919 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The root cause is improper validation of network-supplied pointers , allowing a remote, unauthenticated attacker to execute arbitrary code over the network. The CVSS 3.1 score is 9.8 (CRITICAL) with full impact on confidentiality,...
CVE-2026-16917 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow...
EUVD-2026-62834
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow...
CVE-2026-16917
IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain an integer overflow exploitable by a remote, unauthenticated attacker for arbitrary code execution. CVSS 9.8 (Critical) reflects full confidentiality, integrity, and availability impact. IBM's advisory is linked in references; no exploitation details...