IBM

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any IBM product.

RSS Feeds for IBM security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in IBM products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by IBM Sorted by Most Security Vulnerabilities since 2018

IBM I404 vulnerabilities

IBM Aix269 vulnerabilities

IBM WebSphere Application Server169 vulnerabilities

IBM Db2149 vulnerabilities

IBM Powervm Vios144 vulnerabilities

IBM Sterling B2b Integrator143 vulnerabilities

IBM Infosphere Information Server141 vulnerabilities

IBM Rational Quality Manager132 vulnerabilities

IBM Cognos Analytics98 vulnerabilities

IBM Rational Doors Next Generation95 vulnerabilities

IBM Security Verify Access94 vulnerabilities

IBM Rational Collaborative Lifecycle Management89 vulnerabilities

IBM Security Guardium84 vulnerabilities

IBM Rational Engineering Lifecycle Manager81 vulnerabilities

IBM Maximo Asset Management78 vulnerabilities

IBM Api Connect77 vulnerabilities

IBM Langflow Oss76 vulnerabilities

IBM Vios74 vulnerabilities

IBM Qradar Security Information Event Manager69 vulnerabilities

IBM Mq67 vulnerabilities

IBM Rational Team Concert65 vulnerabilities

IBM Sterling File Gateway62 vulnerabilities

IBM Concert55 vulnerabilities

IBM Business Automation Workflow51 vulnerabilities

IBM Security Access Manager49 vulnerabilities

IBM Security Verify Access Docker48 vulnerabilities

IBM Cloud Pak For Security48 vulnerabilities

IBM Cognos Controller48 vulnerabilities

IBM Rational Rhapsody Design Manager47 vulnerabilities

IBM Aspera Faspex44 vulnerabilities

IBM Spectrum Scale42 vulnerabilities

IBM Urbancode Deploy42 vulnerabilities

IBM Planning Analytics42 vulnerabilities

IBM Mq Appliance41 vulnerabilities

IBM Security Key Lifecycle Manager41 vulnerabilities

IBM Robotic Process Automation40 vulnerabilities

IBM Security Identity Governance Intelligence37 vulnerabilities

IBM Engineering Lifecycle Optimization Publishing36 vulnerabilities

IBM Engineering Lifecycle Management35 vulnerabilities

IBM Engineering Lifecycle Optimization34 vulnerabilities

IBM Maximo Application Suite34 vulnerabilities

IBM Business Process Manager33 vulnerabilities

IBM Websphere Application Server Liberty32 vulnerabilities

IBM Rational Software Architect Design Manager32 vulnerabilities

IBM Planning Analytics Local32 vulnerabilities

IBM Cics Tx31 vulnerabilities

IBM Qradar Siem29 vulnerabilities

IBM Jazz Reporting Service29 vulnerabilities

IBM Power Systems Firmware28 vulnerabilities

IBM Cloud Pak System28 vulnerabilities

IBM Engineering Workflow Management27 vulnerabilities

IBM Verify Identity Access27 vulnerabilities

IBM Spectrum Protect Plus27 vulnerabilities

IBM Content Navigator27 vulnerabilities

IBM Financial Transaction Manager26 vulnerabilities

IBM Engineering Test Management25 vulnerabilities

IBM Cloud Pak Business Automation25 vulnerabilities

IBM Verify Identity Access Container23 vulnerabilities

IBM App Connect Enterprise23 vulnerabilities

IBM Security Verify Access Container23 vulnerabilities

IBM Db2 Mirror For I23 vulnerabilities

IBM Qradar Suite23 vulnerabilities

IBM Concert Software23 vulnerabilities

IBM Openpages With Watson22 vulnerabilities

IBM Infosphere Information Server On Cloud22 vulnerabilities

IBM Security Identity Manager22 vulnerabilities

IBM Spectrum Protect21 vulnerabilities

IBM Controller21 vulnerabilities

IBM Informix Dynamic Server21 vulnerabilities

IBM Bigfix Platform20 vulnerabilities

IBM Robotic Process Automation Cloud Pak20 vulnerabilities

IBM Collaborative Lifecycle Management20 vulnerabilities

IBM Curam Social Program Management20 vulnerabilities

IBM Security Verify Information Queue19 vulnerabilities

IBM Sterling Partner Engagement Manager19 vulnerabilities

IBM Sterling Secure Proxy19 vulnerabilities

IBM Websphere Mq19 vulnerabilities

IBM Datacap19 vulnerabilities

IBM Powervm Hypervisor19 vulnerabilities

IBM Security Verify Governance18 vulnerabilities

IBM Aspera Console18 vulnerabilities

IBM Security Secret Server18 vulnerabilities

IBM Websphere Portal18 vulnerabilities

IBM Datacap Navigator18 vulnerabilities

IBM Engineering Lifecycle Optimization Engineering Insights18 vulnerabilities

IBM Security Qradar Edr17 vulnerabilities

IBM Aspera Shares16 vulnerabilities

IBM Security Directory Server16 vulnerabilities

IBM Security Guardium Key Lifecycle Manager16 vulnerabilities

IBM Applinx15 vulnerabilities

IBM Doors Next15 vulnerabilities

Known Exploited IBM Vulnerabilities

The following IBM vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.

Title	Description	Added
IBM Langflow Code Injection Vulnerability	Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. CVE-2026-9198	August 4, 2026
IBM Aspera Faspex Code Execution Vulnerability	IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw. CVE-2022-47986 Exploit Probability: 100.0%	February 21, 2023
IBM InfoSphere BigInsights Invalid Input Vulnerability	Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data. CVE-2013-3993 Exploit Probability: 5.2%	May 25, 2022
IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.	Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands CVE-2015-7450 Exploit Probability: 97.7%	January 10, 2022
IBM Data Risk Manager Arbritary File Download	IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535. CVE-2020-4430 Exploit Probability: 68.5%	November 3, 2021
IBM Data Risk Manager Authentication Bypass	IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532. CVE-2020-4427 Exploit Probability: 70.0%	November 3, 2021
IBM Data Risk Manager Command Injection	IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533. CVE-2020-4428 Exploit Probability: 61.7%	November 3, 2021
IBM Planning Analytics configuration overwrite vulnerability	IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094. CVE-2019-4716 Exploit Probability: 86.4%	November 3, 2021

Of the known exploited vulnerabilities above, 6 are in the top 1%, or the 99th percentile of the EPSS exploit probability rankings.

By the Year

In 2026 there have been 834 vulnerabilities in IBM with an average score of 7.0 out of ten. Last year, in 2025 IBM had 563 security vulnerabilities published. That is, 271 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.73.

Year	Vulnerabilities	Average Score
2026	834	6.98
2025	563	6.26
2024	503	6.44
2023	357	6.80
2022	327	6.36
2021	443	6.10
2020	353	6.19
2019	454	6.14
2018	451	6.24

It may take a day or so for new IBM vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent IBM Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-3686	Aug 28, 2026	IBM Cloud Pak for Data 11.3.0.2 DoS via Resource Limitation IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources.	Cloud Pak For Data System
CVE-2026-3627	Aug 28, 2026	SQLi in IBM Concert 1.0.0-2.3.1 IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.	Concert
CVE-2026-19295	Aug 28, 2026	IBM Langflow OSS 1.0.0-1.11.1 Authenticated Command Exec via Flow Type IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allowed privilege escalation from "authenticated flow user" to arbitrary OS-level command execution under the server process identity, bypassing the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy control.	Langflow Oss
CVE-2026-19294	Aug 28, 2026	IBM Langflow OSS 1.0.0-1.11.1 Auth Exfil Via Improper Auth IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute and read any user's private flow due to improper authorization.	Langflow Oss
CVE-2026-19286	Aug 28, 2026	IBM Langflow OSS 1.0.0-1.11.1 Remote Code Execution via A2A Endpoint IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on the A2A public endpoint.	Langflow Oss
CVE-2026-18904	Aug 28, 2026	IBM Langflow OSS 1.0.0-1.11.1 NS Collision Remote Info Disclosure & Msg Injection IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive information and inject unauthorized messages due to a namespace collision between user identifiers.	Langflow Oss
CVE-2026-18899	Aug 28, 2026	IBM Langflow OSS 1.0.01.11.1 Remote File Path Traversal IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to read arbitrary files due to path traversal.	Langflow Oss
CVE-2026-18891	Aug 28, 2026	IBM Langflow OSS 1.0.0-1.11.1 Improper Auth RCE IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary flows and access sensitive information due to improper authentication.	Langflow Oss
CVE-2026-18729	Aug 28, 2026	IBM Langflow OSS RCE via improper code gen in 1.0.01.11.1 IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code.	Langflow Oss
CVE-2026-18545	Aug 28, 2026	IBM Langflow OSS SSRF Vulnerability 1.0.0-1.11.1 IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.	Langflow Oss
CVE-2026-18527	Aug 28, 2026	IBM ARE i GUI Component Privilege Escalation IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticated profile gaining elevated privileges on the IBM i system.	Administration Runtime Expert I
CVE-2026-17203	Aug 28, 2026	IBM Admin Runtime Expert for i Improper Auth Leads to Data Exposure IBM Administration Runtime Expert for i 1R1M0 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement.	Administration Runtime Expert I
CVE-2026-16821	Aug 28, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Format String V local PrivEsc IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability.	Aix Powervm Vios
CVE-2025-64649	Aug 28, 2026	IBM Concert 1.0.0-2.3.1 Improper Cert Validation MITM IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation.	Concert
CVE-2025-36290	Aug 28, 2026	IBM Integrated Analytics System 1.0.0.01.0.31.0 TLS Cert Validation Flaw IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.	Integrated Analytics System
CVE-2025-36271	Aug 28, 2026	IBM IAS 1.01.0.31 Weak Crypto (CVE202536271) IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.	Integrated Analytics System
CVE-2026-19783	Aug 20, 2026	IBM AIX/VIOS LLBO: Local Attacker OOB Write via Faulty FS Image IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation.	Aix Powervm Vios
CVE-2026-19449	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 cmdnim Lcl RCE to Root IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root.	Aix Powervm Vios
CVE-2026-19448	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 ESP Handler stack corruption IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service.	Aix Powervm Vios
CVE-2026-19446	Aug 20, 2026	IBM AIX 7.x Remote UDP DoS via crafted packet IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart.	Aix Powervm Vios
CVE-2026-19442	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 vSCSI Pointer Validation Flaw IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.	Aix Powervm Vios
CVE-2026-19437	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote Code Exec via Buffer Overflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.	Aix Powervm Vios
CVE-2026-18835	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1: Remote Auth Cmd Exec via command injection IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.	Aix Powervm Vios
CVE-2026-18840	Aug 20, 2026	IBM AIX 7.2/7.3 PowerVM VIOS 4.1: Local Code Exec via Pointer Validation IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer.	Aix Powervm Vios
CVE-2026-18842	Aug 20, 2026	IBM AIX 7+ OOB Write Enables Escalated Privileges (CVE-2026-18842) IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write.	Aix Powervm Vios
CVE-2026-18832	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote Heap Overflow RCE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.	Aix Powervm Vios
CVE-2026-18828	Aug 20, 2026	IBM AIX 7.2-7.3 / PowerVM VIOS 4.1 DoS via stack overflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow.	Aix Powervm Vios
CVE-2026-18824	Aug 20, 2026	IBM AIX 7.2-7.3 & PowerVM VIOS 4.1: RCE via OS Command Injection IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.	Aix Powervm Vios
CVE-2026-18822	Aug 20, 2026	IBM AIX 7.2/7.3 & VIOS 4.1 DoS via uncontrolled dir record parsing IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption when parsing directory records.	Aix Powervm Vios
CVE-2026-18716	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 OOB Read Enables Remote Info Disclosure IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.	Aix Powervm Vios
CVE-2026-18670	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Integer Underflow DoS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to an integer underflow.	Aix Powervm Vios
CVE-2026-17436	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1: Remote RCE via Heap Buffer Overflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.	Aix Powervm Vios
CVE-2026-17425	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Stack Buffer Overflow Leading to DoS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow.	Aix Powervm Vios
CVE-2026-17424	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote Pathname Bypass IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to improper limitation of a pathname to a restricted directory.	Aix Powervm Vios
CVE-2026-17423	Aug 20, 2026	IBM AIX/PowerVM VIOS 7.2/7.3/4.1 OOB Read Info Leak & DoS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds read.	Aix Powervm Vios
CVE-2026-17422	Aug 20, 2026	Buffer Overflow Exploit in AIX 7.2/7.3 & PowerVM VIOS 4.1 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow.	Aix Powervm Vios
CVE-2026-17195	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Local DoS via OOB Write IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write.	Aix Powervm Vios
CVE-2026-17171	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM 4.1 Local File Overwrite via Symlink IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary files due to improper resolution of symbolic links.	Aix Powervm Vios
CVE-2026-17170	Aug 20, 2026	DDoS via Allocation Size Validation in IBM AIX 7.27.3 & PowerVM VIOS 4.1 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an allocation size.	Aix Powervm Vios
CVE-2026-17168	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Stack Buffer Overflow CVE-2026-17168 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.	Aix Powervm Vios
CVE-2026-17165	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1: NULLptr DDoS via DS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.	Aix Powervm Vios
CVE-2026-17163	Aug 20, 2026	IBM AIX 7.2/7.3 & VIOS 4.1 DoS via array size overvalidation IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an array size field.	Aix Powervm Vios
CVE-2026-17160	Aug 20, 2026	IBM AIX 7.x Remote Code Exec: Integer Overflow in Size Compute IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation.	Aix Powervm Vios
CVE-2026-17159	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Integer Overflow DoS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.	Aix Powervm Vios
CVE-2026-17157	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 stack buffer overflow RCE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.	Aix Powervm Vios
CVE-2026-17152	Aug 20, 2026	IBM AIX/PowerVM VIOS 7.2-7.3 & 4.1 Buffer Overflow RCE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.	Aix Powervm Vios
CVE-2026-17145	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote Code Exec via Privilege Mismanage IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management.	Aix Powervm Vios
CVE-2026-17142	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote Command Execution via Improper Auth IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication.	Aix Powervm Vios
CVE-2026-17141	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote Buffer Overflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.	Aix Powervm Vios
CVE-2026-17138	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 RCE via Stack Buffer Overflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.	Aix Powervm Vios