Threat database

CVE-2026-18824 is a high-severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 that allows a remote authenticated attacker to execute arbitrary OS commands. The issue arises from improper neutralization of special elements used in OS commands, leading to OS command injection. This vulnerability requires high privileges and user interaction to exploit and impacts confidentiality, integrity, and availability.

CVE-2026-18822 is a medium severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. It involves uncontrolled resource consumption during the parsing of directory records by a local attacker, potentially causing a denial of service. The vulnerability requires high privileges and does not impact confidentiality or integrity. No known exploits are reported in the wild. Patch status is not confirmed from the provided data.

CVE-2026-18716 is an out-of-bounds read vulnerability (CWE-125) affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote authenticated attacker to access sensitive information or cause a denial of service. The vulnerability has a high severity rating with a CVSS score of 7.9. No specific patch or remediation details are provided in the available data.

CVE-2026-18670 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an integer underflow that could be exploited remotely to cause a denial of service and potentially disclose sensitive information. The vulnerability does not require user interaction or privileges to exploit and has a network attack vector.

CVE-2026-17436 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a heap-based buffer overflow that could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges. The vulnerability has a CVSS 3.1 base score of 8.8, indicating a significant risk to confidentiality, integrity, and availability.

CVE-2026-17425 is a high severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an out-of-bounds write (CWE-787) that could allow a remote attacker to cause a denial of service via a stack buffer overflow. The vulnerability does not impact confidentiality or integrity but results in service disruption. No known exploits are reported in the wild, and no patch information is provided in the source data.

CVE-2026-17424 is a medium severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 involving improper limitation of a pathname to a restricted directory, also known as a path traversal issue. This flaw could allow a remote attacker to bypass security restrictions. The vulnerability has a CVSS 3.1 base score of 4.8, indicating limited impact on confidentiality and integrity, with no impact on availability. No known exploits are reported in the wild. No patch or remediation information is currently provided.

CVE-2026-17423 is an out-of-bounds read vulnerability (CWE-125) affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to obtain sensitive information and cause a denial of service. The vulnerability has a high severity with a CVSS score of 7.7. No patch or vendor advisory information is provided regarding remediation status.

CVE-2026-17422 is a critical buffer overflow vulnerability (CWE-787) affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It allows a local attacker to execute arbitrary code with high impact on confidentiality, integrity, and availability. The vulnerability is due to an out-of-bounds write condition. No patch information is currently provided.

CVE-2026-17195 is an out-of-bounds write vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a local attacker to cause a denial of service condition. The vulnerability does not impact confidentiality or integrity but affects availability.

CVE-2026-17171 is a vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1, involving improper resolution of symbolic links before file access. This flaw allows a local attacker to overwrite arbitrary files by exploiting the improper link resolution behavior. The vulnerability has a high severity rating with a CVSS score of 7.8, indicating significant potential impact on confidentiality, integrity, and availability.

CVE-2026-17170 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves improper validation of allocation size, which could allow a remote attacker to cause a denial of service by exhausting system resources.

CVE-2026-17168 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves a stack-based buffer overflow that could allow a remote authenticated attacker to execute arbitrary code. The vulnerability requires low privileges and no user interaction but has a high attack complexity. It impacts confidentiality, integrity, and availability with a scope change. No patch information is provided in the source data.

CVE-2026-17165 is a high severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 that allows a remote attacker to cause a denial of service via a NULL pointer dereference. This vulnerability does not impact confidentiality or integrity but results in service disruption.

CVE-2026-17163 is a high severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves improper validation of an array size field, which could allow a remote attacker to cause a denial of service by exhausting system resources. The vulnerability is classified under CWE-770, indicating allocation of resources without limits or throttling. No known exploits are reported in the wild, and no official patch or remediation details are provided in the available data.

CVE-2026-17160 is a critical integer overflow vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. This flaw occurs during size computation and could allow a remote attacker to execute arbitrary code without any privileges or user interaction. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-17159 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an integer overflow or wraparound condition that could be triggered remotely, leading to a denial of service (DoS) condition. The vulnerability does not impact confidentiality or integrity but can disrupt availability by crashing or destabilizing the affected systems.

CVE-2026-17157 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves a stack buffer overflow that could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-17152 is a critical buffer overflow vulnerability (CWE-787) affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to execute arbitrary code without any privileges or user interaction. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-17145 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1, involving improper privilege management. This flaw could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No information about available patches or vendor advisories is provided.