IBM

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any IBM product.

RSS Feeds for IBM security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in IBM products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by IBM Sorted by Most Security Vulnerabilities since 2018

IBM I404 vulnerabilities

IBM Aix268 vulnerabilities

IBM WebSphere Application Server169 vulnerabilities

IBM Db2149 vulnerabilities

IBM Powervm Vios143 vulnerabilities

IBM Sterling B2b Integrator143 vulnerabilities

IBM Infosphere Information Server141 vulnerabilities

IBM Rational Quality Manager132 vulnerabilities

IBM Cognos Analytics98 vulnerabilities

IBM Rational Doors Next Generation95 vulnerabilities

IBM Security Verify Access94 vulnerabilities

IBM Rational Collaborative Lifecycle Management89 vulnerabilities

IBM Security Guardium84 vulnerabilities

IBM Rational Engineering Lifecycle Manager81 vulnerabilities

IBM Maximo Asset Management78 vulnerabilities

IBM Api Connect77 vulnerabilities

IBM Vios74 vulnerabilities

IBM Qradar Security Information Event Manager69 vulnerabilities

IBM Langflow Oss68 vulnerabilities

IBM Mq67 vulnerabilities

IBM Rational Team Concert65 vulnerabilities

IBM Sterling File Gateway62 vulnerabilities

IBM Concert53 vulnerabilities

IBM Business Automation Workflow51 vulnerabilities

IBM Security Access Manager49 vulnerabilities

IBM Security Verify Access Docker48 vulnerabilities

IBM Cloud Pak For Security48 vulnerabilities

IBM Cognos Controller48 vulnerabilities

IBM Rational Rhapsody Design Manager47 vulnerabilities

IBM Aspera Faspex44 vulnerabilities

IBM Urbancode Deploy42 vulnerabilities

IBM Planning Analytics42 vulnerabilities

IBM Spectrum Scale42 vulnerabilities

IBM Security Key Lifecycle Manager41 vulnerabilities

IBM Mq Appliance41 vulnerabilities

IBM Robotic Process Automation40 vulnerabilities

IBM Security Identity Governance Intelligence37 vulnerabilities

IBM Engineering Lifecycle Optimization Publishing36 vulnerabilities

IBM Engineering Lifecycle Management35 vulnerabilities

IBM Maximo Application Suite34 vulnerabilities

IBM Engineering Lifecycle Optimization34 vulnerabilities

IBM Business Process Manager33 vulnerabilities

IBM Websphere Application Server Liberty32 vulnerabilities

IBM Rational Software Architect Design Manager32 vulnerabilities

IBM Planning Analytics Local32 vulnerabilities

IBM Cics Tx31 vulnerabilities

IBM Jazz Reporting Service29 vulnerabilities

IBM Qradar Siem29 vulnerabilities

IBM Cloud Pak System28 vulnerabilities

IBM Power Systems Firmware28 vulnerabilities

IBM Verify Identity Access27 vulnerabilities

IBM Spectrum Protect Plus27 vulnerabilities

IBM Engineering Workflow Management27 vulnerabilities

IBM Content Navigator27 vulnerabilities

IBM Financial Transaction Manager26 vulnerabilities

IBM Engineering Test Management25 vulnerabilities

IBM Cloud Pak Business Automation25 vulnerabilities

IBM App Connect Enterprise23 vulnerabilities

IBM Security Verify Access Container23 vulnerabilities

IBM Qradar Suite23 vulnerabilities

IBM Verify Identity Access Container23 vulnerabilities

IBM Db2 Mirror For I23 vulnerabilities

IBM Concert Software23 vulnerabilities

IBM Infosphere Information Server On Cloud22 vulnerabilities

IBM Openpages With Watson22 vulnerabilities

IBM Security Identity Manager22 vulnerabilities

IBM Spectrum Protect21 vulnerabilities

IBM Informix Dynamic Server21 vulnerabilities

IBM Controller21 vulnerabilities

IBM Bigfix Platform20 vulnerabilities

IBM Robotic Process Automation Cloud Pak20 vulnerabilities

IBM Collaborative Lifecycle Management20 vulnerabilities

IBM Curam Social Program Management20 vulnerabilities

IBM Powervm Hypervisor19 vulnerabilities

IBM Sterling Secure Proxy19 vulnerabilities

IBM Websphere Mq19 vulnerabilities

IBM Security Verify Information Queue19 vulnerabilities

IBM Datacap19 vulnerabilities

IBM Sterling Partner Engagement Manager19 vulnerabilities

IBM Security Verify Governance18 vulnerabilities

IBM Aspera Console18 vulnerabilities

IBM Websphere Portal18 vulnerabilities

IBM Security Secret Server18 vulnerabilities

IBM Engineering Lifecycle Optimization Engineering Insights18 vulnerabilities

IBM Datacap Navigator18 vulnerabilities

IBM Security Qradar Edr17 vulnerabilities

IBM Aspera Shares16 vulnerabilities

IBM Security Directory Server16 vulnerabilities

IBM Security Guardium Key Lifecycle Manager16 vulnerabilities

IBM Applinx15 vulnerabilities

IBM Doors Next15 vulnerabilities

Known Exploited IBM Vulnerabilities

The following IBM vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.

Title	Description	Added
IBM Langflow Code Injection Vulnerability	Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. CVE-2026-9198	August 4, 2026
IBM Aspera Faspex Code Execution Vulnerability	IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw. CVE-2022-47986 Exploit Probability: 100.0%	February 21, 2023
IBM InfoSphere BigInsights Invalid Input Vulnerability	Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data. CVE-2013-3993 Exploit Probability: 5.2%	May 25, 2022
IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.	Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands CVE-2015-7450 Exploit Probability: 97.7%	January 10, 2022
IBM Data Risk Manager Arbritary File Download	IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535. CVE-2020-4430 Exploit Probability: 68.5%	November 3, 2021
IBM Data Risk Manager Authentication Bypass	IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532. CVE-2020-4427 Exploit Probability: 70.0%	November 3, 2021
IBM Data Risk Manager Command Injection	IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533. CVE-2020-4428 Exploit Probability: 61.7%	November 3, 2021
IBM Planning Analytics configuration overwrite vulnerability	IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094. CVE-2019-4716 Exploit Probability: 86.4%	November 3, 2021

Of the known exploited vulnerabilities above, 6 are in the top 1%, or the 99th percentile of the EPSS exploit probability rankings.

By the Year

In 2026 there have been 818 vulnerabilities in IBM with an average score of 7.0 out of ten. Last year, in 2025 IBM had 563 security vulnerabilities published. That is, 255 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.71.

Year	Vulnerabilities	Average Score
2026	818	6.97
2025	563	6.26
2024	503	6.44
2023	357	6.80
2022	327	6.36
2021	443	6.10
2020	353	6.19
2019	454	6.14
2018	451	6.24

It may take a day or so for new IBM vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent IBM Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-19783	Aug 20, 2026	IBM AIX/VIOS LLBO: Local Attacker OOB Write via Faulty FS Image IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation.	Aix Powervm Vios
CVE-2026-19449	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 cmdnim Lcl RCE to Root IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root.	Aix Powervm Vios
CVE-2026-19448	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 ESP Handler stack corruption IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service.	Aix Powervm Vios
CVE-2026-19446	Aug 20, 2026	IBM AIX 7.x Remote UDP DoS via crafted packet IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart.	Aix Powervm Vios
CVE-2026-19442	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 vSCSI Pointer Validation Flaw IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.	Aix Powervm Vios
CVE-2026-19437	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote Code Exec via Buffer Overflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.	Aix Powervm Vios
CVE-2026-18835	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1: Remote Auth Cmd Exec via command injection IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.	Aix Powervm Vios
CVE-2026-18840	Aug 20, 2026	IBM AIX 7.2/7.3 PowerVM VIOS 4.1: Local Code Exec via Pointer Validation IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer.	Aix Powervm Vios
CVE-2026-18842	Aug 20, 2026	IBM AIX 7+ OOB Write Enables Escalated Privileges (CVE-2026-18842) IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write.	Aix Powervm Vios
CVE-2026-18832	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote Heap Overflow RCE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.	Aix Powervm Vios
CVE-2026-18828	Aug 20, 2026	IBM AIX 7.2-7.3 / PowerVM VIOS 4.1 DoS via stack overflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow.	Aix Powervm Vios
CVE-2026-18824	Aug 20, 2026	IBM AIX 7.2-7.3 & PowerVM VIOS 4.1: RCE via OS Command Injection IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.	Aix Powervm Vios
CVE-2026-18822	Aug 20, 2026	IBM AIX 7.2/7.3 & VIOS 4.1 DoS via uncontrolled dir record parsing IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption when parsing directory records.	Aix Powervm Vios
CVE-2026-18716	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 OOB Read Enables Remote Info Disclosure IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.	Aix Powervm Vios
CVE-2026-18670	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Integer Underflow DoS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to an integer underflow.	Aix Powervm Vios
CVE-2026-17436	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1: Remote RCE via Heap Buffer Overflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.	Aix Powervm Vios
CVE-2026-17425	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Stack Buffer Overflow Leading to DoS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow.	Aix Powervm Vios
CVE-2026-17424	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote Pathname Bypass IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to improper limitation of a pathname to a restricted directory.	Aix Powervm Vios
CVE-2026-17423	Aug 20, 2026	IBM AIX/PowerVM VIOS 7.2/7.3/4.1 OOB Read Info Leak & DoS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds read.	Aix Powervm Vios
CVE-2026-17422	Aug 20, 2026	Buffer Overflow Exploit in AIX 7.2/7.3 & PowerVM VIOS 4.1 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow.	Aix Powervm Vios
CVE-2026-17195	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Local DoS via OOB Write IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write.	Aix Powervm Vios
CVE-2026-17171	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM 4.1 Local File Overwrite via Symlink IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary files due to improper resolution of symbolic links.	Aix Powervm Vios
CVE-2026-17170	Aug 20, 2026	DDoS via Allocation Size Validation in IBM AIX 7.27.3 & PowerVM VIOS 4.1 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an allocation size.	Aix Powervm Vios
CVE-2026-17168	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Stack Buffer Overflow CVE-2026-17168 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.	Aix Powervm Vios
CVE-2026-17165	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1: NULLptr DDoS via DS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.	Aix Powervm Vios
CVE-2026-17163	Aug 20, 2026	IBM AIX 7.2/7.3 & VIOS 4.1 DoS via array size overvalidation IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an array size field.	Aix Powervm Vios
CVE-2026-17160	Aug 20, 2026	IBM AIX 7.x Remote Code Exec: Integer Overflow in Size Compute IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation.	Aix Powervm Vios
CVE-2026-17159	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Integer Overflow DoS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.	Aix Powervm Vios
CVE-2026-17157	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 stack buffer overflow RCE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.	Aix Powervm Vios
CVE-2026-17152	Aug 20, 2026	IBM AIX/PowerVM VIOS 7.2-7.3 & 4.1 Buffer Overflow RCE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.	Aix Powervm Vios
CVE-2026-17145	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote Code Exec via Privilege Mismanage IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management.	Aix Powervm Vios
CVE-2026-17142	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote Command Execution via Improper Auth IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication.	Aix Powervm Vios
CVE-2026-17141	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote Buffer Overflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.	Aix Powervm Vios
CVE-2026-17138	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 RCE via Stack Buffer Overflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.	Aix Powervm Vios
CVE-2026-17136	Aug 20, 2026	Remote Code Exec: Format String in IBM AIX 7.2/7.3 & PowerVM VIOS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a format string vulnerability.	Aix Powervm Vios
CVE-2026-17124	Aug 20, 2026	IBM AIX 7.2-7.3 / PowerVM VIOS 4.1 Local Code Exec via OOB Read IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds read.	Aix Powervm Vios
CVE-2026-17122	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 RCE via Stack Buffer Overflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.	Aix Powervm Vios
CVE-2026-17121	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Recursion DoS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.	Aix Powervm Vios
CVE-2026-17120	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Remote DoS via Buffer Overflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a buffer overflow.	Aix Powervm Vios
CVE-2026-17118	Aug 20, 2026	IBM AIX 7.x & PowerVM VIOS 4.1: UAF RCE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.	Aix Powervm Vios
CVE-2026-17060	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Kernel Heap Over-Read Remote Info Leak & DoS IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read.	Aix Powervm Vios
CVE-2026-17040	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 Buffer Overflow RE Code Exec IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.	Aix Powervm Vios
CVE-2026-17024	Aug 20, 2026	IBM AIX 7.2-7.3 & PowerVM VIOS 4.1 RCE via Cert Validation IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation.	Aix Powervm Vios
CVE-2026-17009	Aug 20, 2026	Local DoS via NULL Pointer Deref in IBM AIX 7.2-7.3 & PowerVM VIOS 4.1 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference.	Aix Powervm Vios
CVE-2026-17007	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 OOB Read for Local Attacker IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.	Aix Powervm Vios
CVE-2026-17006	Aug 20, 2026	Heap Overflow in IBM AIX 7.2-7.3 & PowerVM VIOS 4.1: Remote Code Exec IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.	Aix Powervm Vios
CVE-2026-17003	Aug 20, 2026	IBM AIX 7.2-7.3 & PowerVM VIOS 4.1 OOB Write Remote RCE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise the confidentiality and integrity of the system due to an out-of-bounds write.	Aix Powervm Vios
CVE-2026-17000	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1: Remote RCE via Invalid Auth IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper authentication.	Aix Powervm Vios
CVE-2026-16997	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1 LPE via Improper Privilege Mgmt IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management.	Aix Powervm Vios
CVE-2026-16996	Aug 20, 2026	IBM AIX 7.2/7.3 & PowerVM VIOS 4.1: Local Exec via Integer Underflow IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow.	Aix Powervm Vios