Threat Intelligence Database

CVE-2026-16819 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves a time-of-check to time-of-use (TOCTOU) race condition that could allow a local attacker to cause denial of service and compromise data integrity. The vulnerability does not affect confidentiality but impacts integrity and availability. No official patch or remediation guidance is currently provided by IBM.

CVE-2026-16818 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves uncontrolled resource consumption that could allow a remote attacker to cause a denial of service (DoS). The vulnerability does not impact confidentiality or integrity but results in availability disruption. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.

A NULL pointer dereference vulnerability exists in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1, which could allow a remote attacker to cause a denial of service. This vulnerability is identified as CWE-476 and has a CVSS 3.1 score of 7.5, indicating high severity. No official patch or remediation guidance has been provided yet.

CVE-2026-16816 is a critical OS command injection vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It allows a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements in OS commands. The vulnerability has a CVSS score of 9.9, indicating high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor.

CVE-2026-16814 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3 and IBM PowerVM VIOS 4.1. It involves a heap buffer overflow that could allow a remote attacker to execute arbitrary code without requiring privileges or user interaction.

CVE-2026-16703 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1, involving improper privilege management. This flaw could allow a local attacker with limited privileges to gain elevated privileges on the affected systems. The vulnerability is classified under CWE-269, indicating improper privilege management. No official patch or remediation guidance has been provided yet, and there are no known exploits in the wild.

CVE-2026-16690 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves uncontrolled resource consumption that could allow a remote attacker to cause a denial of service (DoS). The vulnerability does not impact confidentiality or integrity but results in availability disruption. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-16686 is a high severity vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1, involving improper authentication that could allow a remote attacker to access NFS-exported filesystems. The vulnerability is classified under CWE-287 (Improper Authentication). No official patch or remediation details have been provided yet.

CVE-2026-16656 is a critical vulnerability in IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1, involving improper authentication. This flaw could allow a remote attacker to gain root privileges without authentication. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.

A buffer overflow vulnerability exists in IBM AIX versions 7.2 and 7.3 and IBM PowerVM VIOS 4.1, causing the NIM server process to crash during client registration. This issue is classified as CWE-120, a classic buffer overflow due to copying data without checking input size. The vulnerability has a high severity score of 7.5 and impacts availability by causing crashes. No official patch or remediation guidance is currently available from the vendor.