Ibm Powervm Vios vulnerabilities

146 known vulnerabilities affecting ibm/powervm_vios.

Total CVEs

146

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL44HIGH77MEDIUM22LOW3

Vulnerabilities

SortPage 3 of 8

CVE-2026-16822P3CRITICALCVSS 9.3v4.12026-08-19

CVE-2026-16822 [CRITICAL] CWE-295 CVE-2026-16822: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC p IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy server and modify traffic due to improper certificate validation.

nvd

CVE-2026-16911P3HIGHCVSS 8.8v4.12026-08-19

CVE-2026-16911 [HIGH] CWE-121 CVE-2026-16911: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack buffer overflow.

nvd

CVE-2026-16686P3HIGHCVSS 8.2v4.12026-08-19

CVE-2026-16686 [HIGH] CWE-287 CVE-2026-16686: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported f IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication.

nvd

CVE-2026-15065P3CRITICALCVSS 9.1v4.12026-08-19

CVE-2026-15065 [CRITICAL] CWE-312 CVE-2026-15065: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security r IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file.

nvd

CVE-2026-16926P3CRITICALCVSS 9.1v4.12026-08-20

CVE-2026-16926 [CRITICAL] CWE-73 CVE-2026-16926: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary f IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input.

nvd

CVE-2026-16848P3HIGHCVSS 8.8v4.12026-08-19

CVE-2026-16848 [HIGH] CWE-78 CVE-2026-16848: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary com IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP options.

nvd

CVE-2026-15078P3HIGHCVSS 8.1v4.12026-08-19

CVE-2026-15078 [HIGH] CWE-295 CVE-2026-15078: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX systems due to improper validation of TLS certificates.

nvd

CVE-2026-16901P3HIGHCVSS 8.8v4.12026-08-19

CVE-2026-16901 [HIGH] CWE-787 CVE-2026-16901: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.

nvd

CVE-2026-16857P3HIGHCVSS 8.2v4.12026-08-19

CVE-2026-16857 [HIGH] CWE-287 CVE-2026-16857: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network tr IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication.

nvd

CVE-2026-16909P3HIGHCVSS 8.8v4.12026-08-19

CVE-2026-16909 [HIGH] CWE-128 CVE-2026-16909: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking.

nvd

CVE-2026-16932P3HIGHCVSS 8.8v4.12026-08-20

CVE-2026-16932 [HIGH] CWE-78 CVE-2026-16932: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary comm IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable.

nvd

CVE-2026-16903P3CRITICALCVSS 9.6v4.12026-08-19

CVE-2026-16903 [CRITICAL] CWE-787 CVE-2026-16903: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a denial of service due to an out-of-bounds write.

nvd

CVE-2026-16839P3CRITICALCVSS 9.4v4.12026-08-19

CVE-2026-16839 [CRITICAL] CWE-125 CVE-2026-16839: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive info IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser.

nvd

CVE-2026-16841P3HIGHCVSS 8.8v4.12026-08-19

CVE-2026-16841 [HIGH] CWE-787 CVE-2026-16841: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

nvd

CVE-2026-16934P3HIGHCVSS 8.8v4.12026-08-20

CVE-2026-16934 [HIGH] CWE-787 CVE-2026-16934: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap-based buffer overflow.

nvd

CVE-2026-19446P3HIGHCVSS 7.5v4.12026-08-20

CVE-2026-19446 [HIGH] CWE-400 CVE-2026-19446: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a cr IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart.

nvd

CVE-2026-16834P3CRITICALCVSS 9.8v4.12026-08-19

CVE-2026-16834 [CRITICAL] CWE-190 CVE-2026-16834: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer underflow.

nvd

CVE-2026-16814P3HIGHCVSS 8.8v4.12026-08-19

CVE-2026-16814 [HIGH] CWE-787 CVE-2026-16814: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.

nvd

CVE-2026-16847P3HIGHCVSS 8.8v4.12026-08-19

CVE-2026-16847 [HIGH] CWE-787 CVE-2026-16847: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.

nvd

CVE-2026-16996P3HIGHCVSS 8.8v4.12026-08-20

CVE-2026-16996 [HIGH] CWE-787 CVE-2026-16996: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow.

nvd

← Previous3 / 8Next →