Threat database

CVE-2026-16989 is a vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1, involving improper resolution of symbolic links. This flaw could allow a local attacker to gain elevated privileges by exploiting how symbolic links are handled before file access. The vulnerability has a high severity rating with a CVSS score of 7.1, indicating significant confidentiality and integrity impact without availability impact.

CVE-2026-16980 is a vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 involving improper validation of symbolic links. This flaw can allow a local attacker to cause a denial of service by exploiting improper link resolution before file access. The vulnerability has a CVSS 3.1 base score of 6.3, indicating a medium severity level. No public exploits are known, and no patch or remediation details are provided in the available data.

CVE-2026-16973 is a vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1, where a local attacker can disclose sensitive kernel memory due to an out-of-bounds read. This exposure of sensitive information could allow unauthorized access to confidential data. The vulnerability has a medium severity rating with a CVSS score of 5.5.

CVE-2026-16972 is an improper authentication vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to obtain sensitive information without proper authentication. The vulnerability has a medium severity rating with a CVSS score of 6.5.

CVE-2026-16964 is a medium severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves the exposure of sensitive information to unauthorized actors, which could allow a remote attacker to intercept messages and forge replies. The vulnerability is classified under CWE-200, indicating an exposure of sensitive information. There are no known exploits in the wild, and no official patch or remediation details are provided in the available data.

CVE-2026-16958 is an out-of-bounds write vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to cause a denial of service condition. The vulnerability does not impact confidentiality or integrity but affects availability. The CVSS v3.1 base score is 6.5, indicating a medium severity level. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.

CVE-2026-16952 is a medium severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 that allows a local attacker to cause a denial of service by uncontrolled resource consumption. The vulnerability does not impact confidentiality or integrity but affects availability. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.

CVE-2026-16951 is a heap-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a local authenticated attacker with high privileges to execute arbitrary code on the affected systems. The vulnerability has a CVSS 3.1 base score of 6.7, indicating a medium severity level. No public exploits are known, and no official patch or remediation details are provided in the available data.

CVE-2026-16946 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves a heap buffer overflow that could allow a local attacker to gain elevated privileges on the affected systems.

CVE-2026-16945 is a stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a local attacker with limited privileges to execute arbitrary code on the affected systems. The vulnerability has a high severity rating with a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No public exploits are known at this time, and no official patch or remediation details have been provided.

CVE-2026-16944 is a stack-based buffer overflow vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a local attacker with high privileges to execute arbitrary code on the affected systems. The vulnerability has a CVSS 3.1 base score of 6.7, indicating a medium severity level. No public exploits are known, and no vendor patch information is provided in the available data.

CVE-2026-16943 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a heap-based buffer overflow that could allow a local attacker with high privileges to execute arbitrary code. The vulnerability does not require user interaction and impacts confidentiality, integrity, and availability. No patch or remediation details are provided in the available data.

CVE-2026-16937 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves improper privilege management that could allow a local attacker to gain elevated privileges without user interaction. The vulnerability has a CVSS 3.1 score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No patch or remediation details are currently provided.

CVE-2026-16936 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves an out-of-bounds write (buffer overflow) that could allow a local attacker to execute arbitrary code. The vulnerability requires local privileges and no user interaction. It impacts confidentiality, integrity, and availability with a scope change.

CVE-2026-16935 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves a time-of-check to time-of-use (TOCTOU) race condition that could allow a local attacker to gain elevated privileges. The vulnerability does not have confirmed exploits in the wild as of the publication date. The CVSS 3.1 base score is 7.8, indicating significant impact on confidentiality, integrity, and availability if exploited.

CVE-2026-16934 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a heap-based buffer overflow that could allow a local attacker to gain elevated privileges. The vulnerability has a CVSS score of 8.8, indicating a significant risk to confidentiality, integrity, and availability. No vendor patch or remediation information is currently provided.

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable.

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use (TOCTOU) race condition.

CVE-2026-16926 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves improper neutralization of special elements in input, which could allow a remote attacker to overwrite arbitrary files. This vulnerability has a high CVSS score of 9.1, indicating a severe impact on integrity and availability without requiring privileges or user interaction.