263171 matches found
CVE-2026-16850
IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1, are vulnerable to command injection via crafted Router Advertisements, enabling remote arbitrary code execution with HIGH severity (CVSS 8.8). Exploitation details are not provided in the documents; refer to the IBM support advisory for patch information.
EUVD-2026-62738
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...
CVE-2026-16847 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...
CVE-2026-16847
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have a heap buffer overflow allowing unauthenticated adjacent-network attackers to execute arbitrary code (CVSS 8.8 HIGH, C/I/A impact). IBM's support page (linked) provides remediation details; no in-the-wild exploitation is reported in the provided documents.
EUVD-2026-62735
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...
CVE-2026-16845
IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1, are affected by a heap buffer overflow exploitable remotely with no authentication, rated CVSS 9.8 CRITICAL. IBM's support page (https://www.ibm.com/support/pages/node/7283858) is the sole reference; no exploit or patch details are provided. Exploitation...
CVE-2026-16844
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to OS command injection (CWE-78) allowing remote arbitrary command execution (CVSS 8.8 HIGH, adjacent network). IBM's support page https://www.ibm.com/support/pages/node/7283858 is the primary reference; no exploitation details or patch versions...
CVE-2026-16844 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
EUVD-2026-62732
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
EUVD-2026-62731
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...
CVE-2026-16841
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack buffer overflow exploitable by a remote, unauthenticated attacker on an adjacent network, yielding arbitrary code execution with HIGH confidentiality, integrity, and availability impact (CVSS 8.8). IBM reference: https://www.ibm.com/support/pag...
CVE-2026-16840 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write...
Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)
Impact A remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where it is executed as the document-merge-server user with the UID 901 thus giving an attacker considerable control over the container. The vulnerabilit...
CVE-2026-63722 ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php
ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an authentication bypass, CSRF validation bypass, and unsanitized command execution. Attackers can send a single HTTP POST request to the...
EUVD-2026-62698
ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an authentication bypass, CSRF validation bypass, and unsanitized command execution. Attackers can send a single HTTP POST request to the...
CVE-2026-63722 ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php
ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an authentication bypass, CSRF validation bypass, and unsanitized command execution. Attackers can send a single HTTP POST request to the...
CVE-2026-17494
CVE-2026-17494 is a stack-based buffer overflow (CWE-121) in the interface between the BMC and host system of IBM Power Systems Firmware. Affected versions are FW1120.00 and FW1110.00 through FW1110.30 . An attacker with service access to the BMC can send a specially crafted command to achieve ar...
CVE-2026-17494 Power System Buffer Overflow
IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system,...
EUVD-2026-62629
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access ...
