CVE-2026-19449

CVE-2026-19449 is a local privilege escalation vulnerability in the cmdnim component of IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . An unprivileged local user can exploit it to execute arbitrary code with root privileges. The CVSS 3.1 score is 8.8 (HIGH) with a changed scope, reflecting full comp...

CVE-2026-19449 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root...

CVE-2026-19448

CVE-2026-19448 is a stack memory corruption vulnerability in the AIX IPsec ESP decapsulation handler , affecting IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . Successful exploitation can corrupt kernel stack state and trigger a system crash , resulting in denial of service . NVD assigns a CVSS 3.1 ...

CVE-2026-19448 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service...

CVE-2026-19446 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...

CVE-2026-19446

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable: a remote unauthenticated attacker can crash a reachable RPC service via a crafted UDP packet, causing complete system unavailability requiring an LPAR restart (CVSS 7.5 HIGH). No patch version or exploit details are provided in the documents; e...

CVE-2026-19442

CVE-2026-19442 is a pointer validation flaw in the AIX Virtual SCSI (vSCSI) initiator driver affecting IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . Successful exploitation can lead to denial of service , privilege escalation , or full compromise of the client LPAR kernel . The CVSS 3.1 score is 8....

CVE-2026-19437

IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 are affected by a buffer overflow that allows a remote attacker to execute arbitrary code. The NVD assigns a CVSS 3.1 score of 9.8 (Critical) with network vector, low complexity, and no required privileges, while IBM's own scoring rates it 8.1 (High) d...

CVE-2026-19437 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-18835 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-18840

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to local privilege escalation via improper validation of an attacker-controlled pointer, enabling arbitrary code execution (CVSS 8.2 HIGH). No patch version or remediation guidance is provided in the documents; no in-the-wild exploitation is rep...

CVE-2026-18840 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer...

CVE-2026-18842

CVE-2026-18842 is an out-of-bounds write vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker to gain elevated privileges . The CVSS 3.1 score is 8.4 (HIGH) with a local attack vector requiring no privileges or user interaction, resulting in high impact to confi...

CVE-2026-18842 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write...

CVE-2026-18832

IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 are affected by a heap-based buffer overflow that allows a remote attacker to execute arbitrary code. The NVD assigns a CVSS 3.1 score of 9.8 (Critical) with a network attack vector, while IBM's CNA scores it 8.8 (High) using an adjacent network vector. ...

CVE-2026-18832 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-18828

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 are affected by a stack-based buffer overflow that allows a remote, unauthenticated attacker to cause a denial of service . The NVD assigns a CVSS 3.1 score of 7.5 (HIGH) with a network attack vector and no required privileges, while IBM's CNA assessment ...

CVE-2026-18828 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow...

CVE-2026-18824

CVE-2026-18824 is an OS command injection vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , caused by improper neutralization of special elements used in an OS command. A remote authenticated attacker can execute arbitrary commands, resulting in full compromise of confidentiality, inte...

CVE-2026-18824 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...