Threat Intelligence Database

CVE-2026-19783 is an out-of-bounds write vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. It allows a local attacker to cause kernel memory corruption by exploiting insufficient validation during directory reads of a crafted filesystem image. This can lead to a system crash or potentially privilege escalation.

CVE-2026-19448 is a stack memory corruption vulnerability in the IPsec ESP decapsulation handler of IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. Exploiting this flaw can corrupt kernel stack state and cause a system crash, resulting in denial of service. The vulnerability is classified under CWE-908 (Use of Uninitialized Resource) and has a CVSS v3.1 base score of 6.5 (medium severity). No public exploits or patches are currently documented.

CVE-2026-19446 is a high-severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. It allows a remote unauthenticated attacker to send a crafted UDP packet to a reachable RPC service, causing uncontrolled resource consumption that results in complete system unavailability and requires an LPAR restart.

CVE-2026-19442 is a high-severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 involving a pointer validation flaw in the AIX Virtual SCSI (vSCSI) initiator driver. Exploitation could lead to denial of service, privilege escalation, or full kernel compromise of the client LPAR. The vulnerability has a CVSS 3.1 score of 8.2, indicating significant impact on confidentiality, integrity, and availability. No patch or remediation information is provided in the available data.

CVE-2026-19437 is a high-severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 involving an out-of-bounds write (buffer overflow) that could allow a remote attacker to execute arbitrary code without privileges or user interaction.

CVE-2026-18835 is a critical OS command injection vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It allows a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements in OS commands. The vulnerability has a CVSS score of 9.9, indicating high impact on confidentiality, integrity, and availability.

CVE-2026-18840 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an untrusted pointer dereference due to improper validation of attacker-controlled pointers, which could allow a local attacker with high privileges to execute arbitrary code. The vulnerability has a CVSS 3.1 score of 8.2, indicating significant impact on confidentiality, integrity, and availability. No vendor patch or remediation information is currently provided.

CVE-2026-18842 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves an out-of-bounds write that could allow a local attacker to gain elevated privileges on the affected systems.

CVE-2026-18828 is a medium severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a stack-based buffer overflow that could be triggered remotely, potentially causing a denial of service. The vulnerability does not require user interaction or privileges to exploit. No known exploits are reported in the wild, and no official patch information is provided.

CVE-2026-18824 is a high-severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 that allows a remote authenticated attacker to execute arbitrary OS commands. The issue arises from improper neutralization of special elements used in OS commands, leading to OS command injection. This vulnerability requires high privileges and user interaction to exploit and impacts confidentiality, integrity, and availability.