CVE-2026-17142 is a critical improper authentication vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS version 4.1. This flaw could allow a remote attacker to execute arbitrary commands without authentication. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No patch or remediation details are provided in the available data.
CVE-2026-17141 is a critical buffer overflow vulnerability (CWE-787) affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to execute arbitrary code without any privileges or user interaction. The vulnerability has a CVSS 3.1 base score of 9.8, indicating a high impact on confidentiality, integrity, and availability.
CVE-2026-17138 is a high-severity stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This vulnerability could allow a remote attacker to execute arbitrary code on the affected systems without requiring user interaction. The vulnerability is due to improper handling of buffer boundaries in the affected software versions.
CVE-2026-17136 is a critical format string vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This vulnerability could allow a remote attacker to execute arbitrary code without any privileges or user interaction. The flaw arises from improper handling of externally-controlled format strings.
CVE-2026-17124 is a high severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an out-of-bounds read (CWE-125) that could allow a local attacker to execute arbitrary code without user interaction. The vulnerability has a CVSS 3.1 score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no patch information is provided in the source data.
CVE-2026-17122 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a stack-based buffer overflow that could allow a remote attacker to execute arbitrary code without any privileges or user interaction. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.
CVE-2026-17121 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves uncontrolled recursion that can be triggered remotely, leading to denial of service (DoS) conditions. The vulnerability does not impact confidentiality or integrity but results in service disruption. No known exploits are reported in the wild. Patch status is not confirmed from the provided data.
CVE-2026-17120 is an out-of-bounds write vulnerability (CWE-787) affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to cause a denial of service by triggering a buffer overflow condition. The vulnerability does not impact confidentiality or integrity but can disrupt availability. The CVSS v3.1 base score is 5.3, indicating medium severity. No known exploits are reported in the wild, and no official patch or remediation details are provided in the available data.
CVE-2026-17118 is a critical use-after-free vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.
CVE-2026-17060 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It allows a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read. The vulnerability does not require user interaction or privileges to exploit. No patch information is currently provided.
CVE-2026-17040 is a critical buffer overflow vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw allows a remote attacker to execute arbitrary code without any privileges or user interaction. The vulnerability arises from improper handling of input sizes during buffer copying, classified as CWE-120. It has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.
CVE-2026-17024 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves improper certificate validation that could allow a remote attacker to execute arbitrary code on affected systems. The vulnerability has a CVSS 3.1 score of 7.7, indicating significant impact on integrity and availability. No patch or remediation details are currently provided.
CVE-2026-17009 is a vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1, where a local attacker can cause a denial of service by triggering a NULL pointer dereference. This issue does not impact confidentiality or integrity but affects availability. The vulnerability requires local access with low privileges and high attack complexity. No public exploits are known, and no patch information is provided.
CVE-2026-17007 is an out-of-bounds read vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. This flaw could allow a local attacker with high privileges to read sensitive information or cause a denial of service. The vulnerability does not require user interaction and affects confidentiality and availability. The CVSS score is 6.7, indicating a medium severity level.
CVE-2026-17006 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a heap buffer overflow that could allow a remote attacker to execute arbitrary code. The vulnerability has a CVSS 3.1 score of 8.3, indicating a significant impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no patch information is provided in the available data.
CVE-2026-17003 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves an out-of-bounds write (CWE-787) that could allow a remote attacker to compromise system confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 7.7, indicating significant impact but requiring high attack complexity and no privileges. No known exploits are reported in the wild, and no patch or remediation details are currently provided.
CVE-2026-17000 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves improper authentication that could allow a remote attacker to execute arbitrary code. The vulnerability has a CVSS 3.1 score of 8.1, indicating significant impact on confidentiality, integrity, and availability. No patch or remediation information is currently provided.
CVE-2026-16997 is a high severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 involving improper privilege management. It allows a local attacker to execute arbitrary commands due to insufficient privilege controls. The vulnerability has a CVSS 3.1 score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No vendor patch or remediation information is provided in the input data.
CVE-2026-16996 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves an integer underflow leading to an out-of-bounds write, which could allow a local attacker to execute arbitrary code with elevated privileges. The vulnerability has a CVSS 3.1 score of 8.8, indicating a significant risk if exploited. No public exploits are currently known, and no patch information is provided in the available data.
CVE-2026-16991 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves improper privilege management due to incorrect handling of symbolic links, allowing a local attacker to gain elevated privileges. The vulnerability has a CVSS 3.1 score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No patch or official fix information is provided in the available data.