CVE-2026-16656

A remote, unauthenticated attacker can gain full root privileges on IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 due to improper authentication, rated CVSS 9.8 Critical (C:H/I:H/A:H). IBM has published a support advisory; check the vendor reference for applicable fixes. No exploit or in-the-wild exploita...

EUVD-2026-62514

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication...

CVE-2026-16656 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication...

CVE-2026-15078 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX systems due to improper validation of TLS certificates...

EUVD-2026-62428

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX systems due to improper validation of TLS certificates...

CVE-2026-15078

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 NIM fail to properly validate TLS certificates, allowing a remote attacker with low privileges to bypass authentication and gain unauthorized access. CVSS 3.1 scores this HIGH (8.1) with full confidentiality and integrity impact. IBM PSIRT is the reporting sou...

CVE-2026-15078 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX systems due to improper validation of TLS certificates...

CVE-2026-15068 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-15068

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 NIM contain an OS command injection flaw via improper neutralization of special elements, allowing a remote authenticated attacker to execute arbitrary commands (CVSS 9.9 Critical). No exploitation or patch details are provided; see IBM support page for mitiga...

EUVD-2026-62426

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

EUVD-2026-62424

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file...

CVE-2026-15065

IBM AIX NIM (versions 7.2, 7.3) and PowerVM VIOS 4.1 expose intermediate CA private keys in publicly available update files (CWE-312), allowing unauthenticated remote attackers to bypass security restrictions. IBM has released Service Packs (SP13/SP5/SP3/SP2) and Fix Packs (4.1.2.20/4.1.1.30/4.1....

CVE-2026-15065 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file...

CVE-2026-15061 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow a remote attacker to overwrite files due to path traversal...

CVE-2026-15061

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 contain a path traversal vulnerability in the nimesis registration service that allows a remote, unauthenticated attacker to overwrite files. The CVSS 3.1 score is 8.2 (HIGH) with high integrity impact and low availability impact. CISA SSVC assesses explo...

EUVD-2026-62423

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow a remote attacker to overwrite files due to path traversal...

CVE-2026-15061 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow a remote attacker to overwrite files due to path traversal...

PT-2026-78464

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fai...

PT-2026-78466

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A remote attacker could cause a denial of service due to uncontrolled resource consumption, which occurs when a system fails to limit the amount of resources such...

PT-2026-78620

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A local attacker can execute arbitrary code because environment variables are not properly scrubbed. Scrubbing refers to the process of removing or neutralizing potentially...