1066 matches found
CVE-2026-16874
CVE-2026-16874 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The root cause is improper enforcement of RBAC authentication roles , which allows a local attacker with low privileges to escalate to root . The CVSS 3.1 score is 7.8 (HIGH) with full impact on confidentiality, integrity, and ava...
EUVD-2026-62875
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write...
CVE-2026-16873 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write...
CVE-2026-16873
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 suffer from an out-of-bounds write enabling local privilege escalation (CVSS 7.8 HIGH). No exploitation details or patch versions are provided in the documents; see IBM support reference for updates.
EUVD-2026-62876
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition undergoing...
CVE-2026-18821 Power System Out-of-bounds Write
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition undergoing...
CVE-2026-18821
IBM PowerVM Hypervisor firmware (FW1120.00, FW1110.00–FW1110.30, FW1060.00–FW1060.80, FW950.00–FW950.H2) is vulnerable to an out-of-bounds write (CWE-787) in partition firmware during network boot . An unauthenticated attacker on the adjacent network can send a malformed packet to achieve arbitra...
CVE-2026-16872
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack-based buffer overflow exploitable over the network with no authentication, allowing arbitrary code execution (CVSS 9.8 Critical). IBM's support page is the primary reference; no exploit code or in-the-wild activity is documented. No patch detai...
EUVD-2026-62756
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-16872 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-16869 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables...
EUVD-2026-62755
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables...
CVE-2026-16869
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are affected by a local privilege escalation flaw caused by improperly scrubbed environment variables, allowing low-privilege local attackers to execute arbitrary code with HIGH confidentiality, integrity, and availability impact (CVSS 7.8). No exploitation de...
CVE-2026-16866
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to an out-of-bounds read exploitable remotely (CVSS 4.8, HIGH complexity, no privileges) causing denial of service. IBM's support page (referenced) may contain patch details. No exploitation or in-the-wild activity is documented in the provided ...
CVE-2026-16866 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
EUVD-2026-62753
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
CVE-2026-16865
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a command injection flaw allowing unauthenticated remote attackers (CVSS 8.8, HIGH) to execute arbitrary code with full confidentiality, integrity, and availability impact. Exploitation details are not provided. Refer to IBM support page for patch info...
CVE-2026-16865 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection...