CVE-2026-64318

Summary (CVE-2026-64318) : In the Linux kernel, the partitions code for AIX on the PPC/IBM layout could read past the end of the ppe[] array. The function aix_partition() loads a fixed-size pvd and iterates up to the on-disk pp_count, which could exceed the allocated 1016 entries, leading to pote...

PT-2026-64539

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the aix partition function where the system reads a physical volume descriptor into a fixed-size struct pvd and scans its physical-partition-extent array. The loop...

Security Bulletin: AIX is vulnerable to denial of service due to zlib (CVE-2026-27171)

Summary A vulnerability in zlib could allow a remote attacker to cause a denial of service CVE-2026-27171. AIX uses zlib as part of its data compression functions. Vulnerability Details CVEID:CVE-2026-27171 DESCRIPTION: zlib before 1.3.2 allows CPU consumption via crc32combine64 and...

Security Bulletin: Multiple vulnerabilities impact AIX due to OpenSSL

Summary Vulnerabilities in OpenSSL could cause denial of service CVE-2026-9076, CVE-2026-42767, CVE-2026-42766, heap buffer overflow CVE-2026-7383, crash and heap corruption CVE-2026-45447, forge authentication CVE-2026-45446, loss of confidentiality CVE-2026-45445, credential exposure...

AIX is vulnerable to denial of service due to zlib (CVE-2026-27171)

IBM SECURITY ADVISORY First Issued: Wed Jul 22 02:19:43 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/zlibadvisory3.asc Security Bulletin: AIX is vulnerable to denial of service due to zlib CVE-2026-27171...

Security Bulletin: Multiple vulnerabilities in python affects AIX/VIOS.

Summary Integer overflow and use after may cause memory corruption and denial of service. Vulnerability Details CVEID:CVE-2026-56403 DESCRIPTION: libexpat before 2.8.2 has an integer overflow in storeAtts. CWE:CWE-190: Integer Overflow or Wraparound CVSS Source: NVD CVSS Base score: 6.9 CVSS...

Security Bulletin: Multiple vulnerabilities in Python affects AIX/VIOS.

Summary Integer overflow and use after may cause memory corruption and denial of service. Vulnerability Details CVEID:CVE-2026-56403 DESCRIPTION: libexpat before 2.8.2 has an integer overflow in storeAtts. CWE:CWE-190: Integer Overflow or Wraparound CVSS Source: NVD CVSS Base score: 6.9 CVSS...

Security Bulletin: Vulnerabilities in python (CVE-2026-56131, CVE-2026-56132) affects AIX/VIOS.

Summary Use after free and heap buffer overflow may casue denial of service. Vulnerability Details CVEID:CVE-2026-56131 DESCRIPTION: libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can...

Multiple vulnerabilities in Python affect AIX

IBM SECURITY ADVISORY First Issued: Tue Jul 14 06:03:19 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory20.asc Security Bulletin: Multiple vulnerabilities in Python affect AIX...

Security Bulletin: Vulnerability in BIND (CVE-2026-3592, CVE-2026-5946) affects AIX/ VIOS.

Summary CVE-2026-3592: Resolver queries a specially crafted zone containing self-pointed glue records, causing disproportionate resource consumption. CVE-2026-5946: Specially crafted DNS messages using non-IN classes e.g., CHAOS, HESIOD, ANY, NONE trigger assertion failures, terminating the named...

Security Bulletin: Multiple vulnerabilities impacts AIX due to cURL libcurl (CVE-2026-1965, CVE-2026-3783, CVE-2026-3784)

Summary Multiple vulnerabilities in the curl/libcurl are related to unauthorized access. Vulnerability Details CVEID:CVE-2026-1965 DESCRIPTION: libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request. libcurl features a pool o...

Security Bulletin: Vulnerability impacts AIX due to cURL libcurl (CVE-2026-5545).

Summary A logic error allows libcurl to reuse an existing Negotiate-authenticated connection even when a new request specifies different credentials for the same server. Vulnerability Details CVEID:CVE-2026-5545 DESCRIPTION: libcurl might in some circumstances reuse the wrong connection when aske...

Multiple vulnerabilities impacts AIX due to cURL libcurl (CVE-2025-14819 CVE-2026-1965 CVE-2026-3783 CVE-2026-3784 CVE-2026-5545)

IBM SECURITY ADVISORY First Issued: Fri Jun 26 01:16:13 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/curladvisory10.asc Security Bulletin: Multiple vulnerabilities impacts AIX due to cURL libcurl CVE-2025-14819, CVE-2026-196...

CVE-2026-56315

CVE-2026-56315 affects the Python tool picklescan until version 1.0.4, which fails to block imports from at least seven standard library modules (e.g., uuid, _osx_support, _aix_support, _pyrepl.pager, imaplib). This allows adversaries to craft pickle files that import these unblocked modules to t...

CVE-2026-8335

A missing authentication check on the Aix‑DB "/llm/processllmout" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all other application endpoints. All releases up to 1.2.4 are...

CVE-2026-8335

A missing authentication check on the Aix‑DB "/llm/processllmout" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all other application endpoints. All releases up to 1.2.4 are...

EUVD-2026-36050

A missing authentication check on the Aix‑DB "/llm/processllmout" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all other application endpoints. All releases up to 1.2.4 are...

CVE-2026-8335 Missing authentication in Aix-DB

A missing authentication check on the Aix‑DB "/llm/processllmout" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all other application endpoints. All releases up to 1.2.4 are...

CVE-2026-8335 Missing authentication in Aix-DB

A missing authentication check on the Aix‑DB "/llm/processllmout" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all other application endpoints. All releases up to 1.2.4 are...

CVE-2026-8335

CVE-2026-8335 affects Aix-DB. A missing authentication check on the "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary SQL (e.g., arbitrary SELECTs) and retrieve database data, because token validation enforced on other endpoints is absent here. All releases up to...