CVE-2026-19446 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...

CVE-2026-19446

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable: a remote unauthenticated attacker can crash a reachable RPC service via a crafted UDP packet, causing complete system unavailability requiring an LPAR restart (CVSS 7.5 HIGH). No patch version or exploit details are provided in the documents; e...

CVE-2026-19442

CVE-2026-19442 is a pointer validation flaw in the AIX Virtual SCSI (vSCSI) initiator driver affecting IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . Successful exploitation can lead to denial of service , privilege escalation , or full compromise of the client LPAR kernel . The CVSS 3.1 score is 8....

CVE-2026-19442 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI vSCSI initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel...

CVE-2026-19437

IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 are affected by a buffer overflow that allows a remote attacker to execute arbitrary code. The NVD assigns a CVSS 3.1 score of 9.8 (Critical) with network vector, low complexity, and no required privileges, while IBM's own scoring rates it 8.1 (High) d...

CVE-2026-19437 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-18835 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-18835

CVE-2026-18835 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A remote authenticated attacker with low privileges can execute arbitrary commands via OS command injection (improper neutralization of special elements in an OS command). The CVSS 3.1 score is 9.9 (CRITICAL) with a changed scope ...

CVE-2026-18840 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer...

CVE-2026-18840

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to local privilege escalation via improper validation of an attacker-controlled pointer, enabling arbitrary code execution (CVSS 8.2 HIGH). No patch version or remediation guidance is provided in the documents; no in-the-wild exploitation is rep...

CVE-2026-18842 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write...

CVE-2026-18842

CVE-2026-18842 is an out-of-bounds write vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker to gain elevated privileges . The CVSS 3.1 score is 8.4 (HIGH) with a local attack vector requiring no privileges or user interaction, resulting in high impact to confi...

CVE-2026-18832

IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 are affected by a heap-based buffer overflow that allows a remote attacker to execute arbitrary code. The NVD assigns a CVSS 3.1 score of 9.8 (Critical) with a network attack vector, while IBM's CNA scores it 8.8 (High) using an adjacent network vector. ...

CVE-2026-18832 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-18828

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 are affected by a stack-based buffer overflow that allows a remote, unauthenticated attacker to cause a denial of service . The NVD assigns a CVSS 3.1 score of 7.5 (HIGH) with a network attack vector and no required privileges, while IBM's CNA assessment ...

CVE-2026-18828 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow...

CVE-2026-18824 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-18824

CVE-2026-18824 is an OS command injection vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , caused by improper neutralization of special elements used in an OS command. A remote authenticated attacker can execute arbitrary commands, resulting in full compromise of confidentiality, inte...

CVE-2026-18822

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to a local denial-of-service flaw (CVSS 4.4, MEDIUM) caused by uncontrolled resource consumption when parsing directory records. A high-privilege local attacker can trigger this to disrupt availability. IBM's support page (https://www.ibm.com/su...

CVE-2026-18822 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption when parsing directory records...