Threat database

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization.

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation.

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use (TOCTOU) race condition.

CVE-2025-36254 is a high-severity vulnerability in IBM System Storage DS8A00 and DS8900F series. It involves improper encoding or escaping of DSCLI command output, which could allow an attacker to bypass security authentication. This flaw may lead to unauthorized access to sensitive information or cause a denial of service. The affected versions include IBM DS8A00 from 10.1.3.0 through 10.11.35.0 and IBM DS8900F from 89.40.83.0 through 89.44.25.0.

CVE-2025-36255 affects IBM System Storage DS8A00 and DS8900F products in specified versions. The vulnerability allows an authenticated user to create a user account with privileged roles due to improper privilege definitions involving unsafe actions. This could lead to high impact on confidentiality, integrity, and availability. The CVSS score is 7.5, indicating a high severity vulnerability.

CVE-2025-36398 is a medium severity vulnerability in IBM System Storage DS8A00 and DS8900F products. It allows an authenticated user to read or modify another user's command history due to an externally controlled filename. The affected versions include DS8A00 from 10.1.3.0 through 10.11.35.0 and DS8900F from 89.40.83.0 through 89.44.25.0. The vulnerability is related to CWE-73 (External Control of File Name or Path). No patch or remediation information is provided in the available data.

IBM Reliable Scalable Cluster Technology (RSCT) version 3.0 contains a vulnerability where improper input validation allows a remote attacker to cause a denial of service by allocating resources without limits or throttling. This vulnerability is identified as CWE-770 and has a CVSS 3.1 base score of 6.5, indicating a medium severity impact focused on availability disruption.

CVE-2026-17015 is an out-of-bounds read vulnerability in IBM i versions 7.3 through 7.6. It allows a remote authenticated attacker to cause a denial of service and potentially obtain sensitive information. The vulnerability has a medium severity rating with a CVSS score of 5.4.

CVE-2026-18102 is a heap-based buffer overflow vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6. It arises from an integer underflow during bounds checking, allowing a remote authenticated attacker to overwrite adjacent memory. The vulnerability has a low severity with a CVSS score of 3.5 and requires low privileges and high attack complexity. No known exploits are reported in the wild, and no official patch information is provided.

IBM Portieris versions 0.5.0 through 0.14.2 contain a missing authorization vulnerability that allows a remote authenticated attacker to bypass image policy enforcement. This occurs due to improper authorization of pod owner references, potentially leading to unauthorized container image usage.

IBM OpenBMC versions FW1060.00 through FW1060.80 contain a path traversal vulnerability in the BMC firmware update process. This flaw allows an attacker with authenticated administrator-level access to execute arbitrary code, potentially impacting confidentiality, integrity, and availability of the system. The vulnerability is identified as CWE-22 and has a CVSS 3.1 base score of 6.8, indicating a medium severity level.

CVE-2026-4936 is a vulnerability in IBM PowerVM Hypervisor's Platform KeyStore (PKS) and virtual TPM firmware versions FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2. The issue involves the use of persistent storage key seeds that produce an AES key with reduced cryptographic strength due to insufficient entropy. An attacker with high-level access to the service processor or Hardware Management Console (HMC) could potentially derive the encryption key and gain unauthorized access to protected data.

CVE-2026-4937 is a medium severity vulnerability in IBM PowerVM Hypervisor versions FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2. It involves insufficient entropy in certain hypervisor calls, which could allow a local attacker with administrative privileges to decrypt encrypted data. The vulnerability does not affect confidentiality, integrity, or availability beyond the described impact. No known exploits are reported in the wild, and no patch information is provided.

CVE-2026-16707 is an out-of-bounds read vulnerability in IBM PowerVM Hypervisor's service processor mailbox interface. It affects multiple firmware versions and allows an authenticated attacker with service-level access to the Flexible Service Processor (FSP) to read or modify arbitrary Hostboot memory regions. Exploitation compromises the host firmware boot stack and the hypervisor loaded thereafter, impacting confidentiality, integrity, and availability of the managed system.

CVE-2026-16919 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves improper validation of network-supplied pointers leading to type confusion (CWE-843). This flaw could allow a remote attacker to execute arbitrary code without requiring privileges or user interaction.

CVE-2026-16917 is a critical integer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to execute arbitrary code on the affected systems without any user interaction or privileges. The vulnerability is due to improper handling of integer values leading to overflow or wraparound conditions.

CVE-2026-16914 is an out-of-bounds write vulnerability in IBM AIX versions 7.2, 7.3, and IBM PowerVM VIOS 4.1. This flaw could allow a local attacker with high privileges to execute arbitrary code. The vulnerability has a CVSS 3.1 base score of 6.7, indicating a medium severity level. No public exploits are known, and no vendor patch information is provided in the input data.

CVE-2026-16913 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a stack buffer overflow that could allow a remote attacker to execute arbitrary code without any privileges or user interaction.

CVE-2026-16911 is a high-severity stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw allows a remote authenticated attacker to execute arbitrary code on the affected systems without user interaction.