CVE-20XX-?

IBM Aix CVEs.

Published CVEs affecting IBM Aix, ranked by exploit odds.

31 CVEs · updated 2026-11-06 02:16 UTC

  1. CVE-2026-16850

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements.

    Auth & access Network gear IBM Aix

    8.8 HIGH 1% exploit odds Fix listed
  2. CVE-2024-56346

    IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls.

    IBM Aix

    10.0 CRITICAL 1% exploit odds Fix listed
  3. CVE-2024-56347

    IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls.

    IBM Aix

    9.6 CRITICAL 0.9% exploit odds Fix listed
  4. CVE-2026-16845

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.

    Memory safety IBM Aix

    9.8 CRITICAL 0.8% exploit odds Fix listed
  5. CVE-2026-16862

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

    Memory safety IBM Aix

    9.8 CRITICAL 0.8% exploit odds Fix listed
  6. CVE-2026-16840

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.

    Memory safety IBM Aix

    9.8 CRITICAL 0.8% exploit odds Fix listed
  7. CVE-2026-16919

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers.

    Code execution IBM Aix

    9.8 CRITICAL 0.8% exploit odds Fix listed
  8. CVE-2026-16834

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer underflow.

    Memory safety IBM Aix

    9.8 CRITICAL 0.6% exploit odds Fix listed
  9. CVE-2026-16857

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication.

    Auth & access IBM Aix

    8.2 HIGH 0.6% exploit odds Fix listed
  10. CVE-2026-16824

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to unbounded recursion.

    Denial of service IBM Aix

    7.5 HIGH 0.5% exploit odds Fix listed
  11. CVE-2026-16831

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

    Denial of service IBM Aix

    7.5 HIGH 0.5% exploit odds Fix listed
  12. CVE-2026-16836

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

    Denial of service IBM Aix

    7.5 HIGH 0.5% exploit odds Fix listed
  13. CVE-2026-16852

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.

    Memory safety IBM Aix

    7.5 HIGH 0.5% exploit odds Fix listed
  14. CVE-2026-16839

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser.

    Memory safety Library IBM Aix

    9.4 CRITICAL 0.5% exploit odds Fix listed
  15. CVE-2026-16842

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

    Injection IBM Aix

    8.8 HIGH 0.5% exploit odds Fix listed
  16. CVE-2026-16844

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

    Injection IBM Aix

    8.8 HIGH 0.5% exploit odds Fix listed
  17. CVE-2026-16848

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP options.

    Injection IBM Aix

    8.8 HIGH 0.5% exploit odds Fix listed
  18. CVE-2026-16827

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer.

    Denial of service IBM Aix

    5.9 MEDIUM 0.4% exploit odds Fix listed
  19. CVE-2026-16841

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

    Memory safety IBM Aix

    8.8 HIGH 0.4% exploit odds Fix listed
  20. CVE-2026-16847

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.

    Memory safety IBM Aix

    8.8 HIGH 0.4% exploit odds Fix listed
  21. CVE-2026-16833

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read.

    Memory safety OS & kernel IBM Aix

    5.3 MEDIUM 0.4% exploit odds Fix listed
  22. CVE-2026-16837

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper handling of a missing SSL client certificate.

    Denial of service IBM Aix

    7.5 HIGH 0.3% exploit odds Fix listed
  23. CVE-2026-16825

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.

    Memory safety IBM Aix

    4.2 MEDIUM 0.3% exploit odds Fix listed
  24. CVE-2026-16846

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a null pointer dereference.

    Memory safety IBM Aix

    6.5 MEDIUM 0.3% exploit odds Fix listed
  25. CVE-2026-16851

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free.

    Memory safety IBM Aix

    7.4 HIGH 0.3% exploit odds Fix listed
  26. CVE-2026-16849

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper check for an array index boundary.

    Denial of service IBM Aix

    4.3 MEDIUM 0.3% exploit odds Fix listed
  27. CVE-2026-16822

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy server and modify traffic due to improper certificate validation.

    Crypto Server IBM Aix

    9.3 CRITICAL 0.3% exploit odds Fix listed
  28. CVE-2026-16829

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.

    Memory safety IBM Aix

    5.3 MEDIUM 0.2% exploit odds Fix listed
  29. CVE-2026-16855

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow.

    Memory safety IBM Aix

    5.5 MEDIUM 0.1% exploit odds Fix listed
  30. CVE-2026-16821

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability.

    Other IBM Aix

    7.0 HIGH 0.1% exploit odds Fix listed
  31. CVE-2026-16838

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check to time-of-use (TOCTOU) race condition.

    Other IBM Aix

    7.0 HIGH 0.1% exploit odds Fix listed

All CVEs affecting IBM Aix that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.