Ibm vulnerabilities
Published CVEs affecting Ibm products: 1629 record(s), with severity, exploitation and fixes.
I 163Aix 159Vios 156PowerVM VIOS 145Langflow OSS 143Websphere Application Server 98Guardium Data Protection 91Db2 69Security Verify Access 63Verify Identity Access 63Concert 62Verify Identity Access Container 59Security Verify Access Container 58Datastage On Cloud Pak For Data 58WebSphere Application Server - Liberty 54Financial Transaction Manager (FTM) for RedHat OpenShift 47Financial Transaction Manager 46Datapower Gateway 43DataPower Gateway 10.6.0 43DataPower Gateway 10.5.0 42DataPower Gateway 11.0.0 41DataPower Gateway 10.6CD 41Power System E1180 (9080-heu) Firmware 36Power System E1080 (9080-hex) Firmware 35Power System L1124 (9856-42h) Firmware 32Power System E1150 (9043-mru) Firmware 32Power System S1024 (9105-42a) Firmware 32Power System S1022 (9105-22a) Firmware 32Power System S1022s (9105-22b) Firmware 32Power System E1050 (9043-mrx) Firmware 32Power System S1114 (9824-41b) Firmware 32Power System L1122 (9856-22h) Firmware 32Power System S1014 (9105-41b) Firmware 32Power System L1024 (9786-42h) Firmware 32Power System S1012 (9028-21b) Firmware 32Power System L1022 (9786-22h) Firmware 32Power System S1122 (9824-22a) Firmware 32Power System S1124 (9824-42a) Firmware 32Power System S1122s (9824-22b) Firmware 32Power System S922 (9009-22g) Firmware 28
CVE-2026-16901
High · 8.8
CWE-787 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.
CVE-2026-16897
Medium · 4.4
CWE-369 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write.
CVE-2026-16894
Critical · 9.8
CWE-787 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVE-2026-16891
Low · 3.3
CWE-125 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-16890
Low · 3.6
CWE-190 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow.
CVE-2026-16888
Low · 3.7
CWE-22 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a path traversal vulnerability.
CVE-2026-16886
Medium · 4.3
CWE-787 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
CVE-2026-16885
Critical · 9.8
CWE-121 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVE-2026-16883
Medium · 5.5
CWE-125 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-16882
Critical · 9.8
CWE-78 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-16877
High · 8.8
CWE-121 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-16875
High · 7.8
CWE-78 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to shell metacharacter injection.
CVE-2026-16874
High · 7.8
CWE-269 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles.
CVE-2026-16873
High · 7.8
CWE-787 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write.
CVE-2026-16872
Critical · 9.8
CWE-121 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-16869
High · 7.8
CWE-426 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables.
CVE-2026-16866
Medium · 4.8
CWE-125 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
CVE-2026-16865
High · 8.8
CWE-78 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection.
CVE-2026-16864
Critical · 9.8
CWE-787 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVE-2026-16862
Critical · 9.8
CWE-787 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVE-2026-16857
High · 8.2
CWE-287 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication.
CVE-2026-16855
Medium · 5.5
CWE-787 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow.
CVE-2026-16852
High · 7.5
CWE-190 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.
CVE-2026-16851
High · 7.4
CWE-416 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free.
CVE-2026-16850
High · 8.8
CWE-269 Aug 19, 2026
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements.