CVE-2026-16869

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are affected by a local privilege escalation flaw caused by improperly scrubbed environment variables, allowing low-privilege local attackers to execute arbitrary code with HIGH confidentiality, integrity, and availability impact (CVSS 7.8). No exploitation de...

CVE-2026-16724 Power System Integer Overflow

IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface VMI. An attacker with authenticated administrator-level access can cause the VMI to crash. Th...

CVE-2026-16724

IBM Power Systems firmware running the Virtualization Management Interface (VMI) is vulnerable to CWE-190 integer overflow, classified CVSS 4.5 (Medium). Authenticated administrators can crash the VMI, which auto-restarts, but repeated exploitation could cause sustained availability impact. Affec...

EUVD-2026-62754

IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface VMI. An attacker with authenticated administrator-level access can cause the VMI to crash. Th...

CVE-2026-16866

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to an out-of-bounds read exploitable remotely (CVSS 4.8, HIGH complexity, no privileges) causing denial of service. IBM's support page (referenced) may contain patch details. No exploitation or in-the-wild activity is documented in the provided ...

CVE-2026-16866 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

EUVD-2026-62753

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

CVE-2026-16865 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection...

EUVD-2026-62752

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection...

CVE-2026-16865

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a command injection flaw allowing unauthenticated remote attackers (CVSS 8.8, HIGH) to execute arbitrary code with full confidentiality, integrity, and availability impact. Exploitation details are not provided. Refer to IBM support page for patch info...

EUVD-2026-62751

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...

CVE-2026-16864 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...

CVE-2026-16864

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to a remote, unauthenticated stack buffer overflow allowing arbitrary code execution (CVSS 9.8). IBM's advisory (linked) should be consulted for specific patch details; no exploitation evidence is provided in the documents.

CVE-2026-16862

CVE-2026-16862 is a critical (CVSS 9.8) stack buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote, unauthenticated attacker to execute arbitrary code over the network with no user interaction. CISA SSVC assessment rates it as automatable with total technical impact ,...

CVE-2026-16862 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...

EUVD-2026-62750

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...

EUVD-2026-62749

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication...

CVE-2026-16857

IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 are vulnerable to remote unauthenticated attacks that allow manipulation of network traffic and DNS configuration. CVSS 8.2 (HIGH) reflects no privileges or user interaction required; IBM support page https://www.ibm.com/support/pages/node/7283858 is the prim...

CVE-2026-16857 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication...

CVE-2026-16855

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 have a heap buffer overflow exploitable by a local attacker with low privileges, causing denial of service (CVSS 5.5, MEDIUM). Exploitation in the wild is not reported in the provided documents; see IBM support reference for patch details.