CVE-20XX-?

IBM Vios CVEs.

Published CVEs affecting IBM Vios, ranked by exploit odds.

122 CVEs · updated 2026-11-06 07:40 UTC

  1. CVE-2026-16865

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection.

    Injection IBM Vios

    8.8 HIGH 2% exploit odds Fix listed
  2. CVE-2026-19446

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart.

    Denial of service IBM Vios

    7.5 HIGH 1% exploit odds Fix listed
  3. CVE-2026-17436

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.

    Memory safety IBM Vios

    8.8 HIGH 0.9% exploit odds Fix listed
  4. CVE-2026-18832

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.

    Memory safety IBM Vios

    8.8 HIGH 0.9% exploit odds Fix listed
  5. CVE-2026-17142

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication.

    Auth & access IBM Vios

    9.8 CRITICAL 0.9% exploit odds Fix listed
  6. CVE-2026-16882

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

    Injection IBM Vios

    9.8 CRITICAL 0.9% exploit odds Fix listed
  7. CVE-2026-16864

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  8. CVE-2026-16872

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  9. CVE-2026-16885

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  10. CVE-2026-16894

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  11. CVE-2026-16913

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  12. CVE-2026-17040

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  13. CVE-2026-17122

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  14. CVE-2026-17141

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  15. CVE-2026-17152

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  16. CVE-2026-17157

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  17. CVE-2026-16917

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  18. CVE-2026-17118

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  19. CVE-2026-17136

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a format string vulnerability.

    Code execution IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  20. CVE-2026-17160

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation.

    Memory safety IBM Vios

    9.8 CRITICAL 0.8% exploit odds Fix listed
  21. CVE-2026-15068

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

    Injection OS & kernel IBM Vios

    9.9 CRITICAL 0.8% exploit odds Fix listed
  22. CVE-2026-16816

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

    Injection OS & kernel IBM Vios

    9.9 CRITICAL 0.8% exploit odds Fix listed
  23. CVE-2026-18835

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

    Injection IBM Vios

    9.9 CRITICAL 0.8% exploit odds Fix listed
  24. CVE-2026-17006

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.

    Memory safety IBM Vios

    8.3 HIGH 0.8% exploit odds Fix listed
  25. CVE-2026-17000

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper authentication.

    Auth & access IBM Vios

    8.1 HIGH 0.8% exploit odds Fix listed
  26. CVE-2026-16877

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.

    Memory safety IBM Vios

    8.8 HIGH 0.8% exploit odds Fix listed
  27. CVE-2026-16911

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack buffer overflow.

    Memory safety IBM Vios

    8.8 HIGH 0.8% exploit odds Fix listed
  28. CVE-2026-17145

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management.

    Auth & access IBM Vios

    9.8 CRITICAL 0.7% exploit odds Fix listed
  29. CVE-2026-16656

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication.

    Auth & access OS & kernel IBM Vios

    9.8 CRITICAL 0.7% exploit odds Fix listed
  30. CVE-2026-17060

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read.

    Disclosure OS & kernel IBM Vios

    8.1 HIGH 0.7% exploit odds Fix listed
  31. CVE-2025-36250

    IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls.  This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.

    Code execution OS & kernel IBM Vios

    10.0 CRITICAL 0.7% exploit odds Fix listed
  32. CVE-2026-17138

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

    Memory safety IBM Vios

    8.1 HIGH 0.7% exploit odds Fix listed
  33. CVE-2026-19437

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

    Memory safety IBM Vios

    8.1 HIGH 0.7% exploit odds Fix listed
  34. CVE-2026-15065

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file.

    Crypto OS & kernel IBM Vios

    9.1 CRITICAL 0.6% exploit odds Fix listed
  35. CVE-2026-16958

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.

    Memory safety IBM Vios

    6.5 MEDIUM 0.6% exploit odds Fix listed
  36. CVE-2026-17168

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.

    Memory safety IBM Vios

    8.5 HIGH 0.6% exploit odds Fix listed
  37. CVE-2026-18824

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

    Injection IBM Vios

    8.4 HIGH 0.6% exploit odds Fix listed
  38. CVE-2026-15061

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow a remote attacker to overwrite files due to path traversal.

    Disclosure OS & kernel IBM Vios

    8.2 HIGH 0.6% exploit odds Fix listed
  39. CVE-2026-16926

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input.

    Other IBM Vios

    9.1 CRITICAL 0.6% exploit odds Fix listed
  40. CVE-2026-18828

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow.

    Memory safety IBM Vios

    5.4 MEDIUM 0.6% exploit odds Fix listed
  41. CVE-2026-16690

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

    Denial of service OS & kernel IBM Vios

    7.5 HIGH 0.5% exploit odds Fix listed
  42. CVE-2026-16706

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.

    Memory safety OS & kernel IBM Vios

    7.5 HIGH 0.5% exploit odds Fix listed
  43. CVE-2026-16817

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.

    Memory safety OS & kernel IBM Vios

    7.5 HIGH 0.5% exploit odds Fix listed
  44. CVE-2026-16818

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

    Denial of service OS & kernel IBM Vios

    7.5 HIGH 0.5% exploit odds Fix listed
  45. CVE-2026-16924

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation.

    Denial of service IBM Vios

    7.5 HIGH 0.5% exploit odds Fix listed
  46. CVE-2026-17121

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.

    Denial of service IBM Vios

    7.5 HIGH 0.5% exploit odds Fix listed
  47. CVE-2026-17159

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.

    Memory safety IBM Vios

    7.5 HIGH 0.5% exploit odds Fix listed
  48. CVE-2026-17163

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an array size field.

    Denial of service IBM Vios

    7.5 HIGH 0.5% exploit odds Fix listed
  49. CVE-2026-17165

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.

    Memory safety IBM Vios

    7.5 HIGH 0.5% exploit odds Fix listed
  50. CVE-2026-17170

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an allocation size.

    Denial of service IBM Vios

    7.5 HIGH 0.5% exploit odds Fix listed

All CVEs affecting IBM Vios that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.