Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Total 9102 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-16822 1 Ibm 2 Aix, Vios 2026-10-26 N/A 9.3 CRITICAL
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy server and modify traffic due to improper certificate validation.
CVE-2026-7870 1 Ibm 1 I 2026-10-26 N/A 8.8 HIGH
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.
CVE-2026-16874 1 Ibm 2 Aix, Vios 2026-10-26 N/A 7.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles.
CVE-2026-16877 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-16888 1 Ibm 2 Aix, Vios 2026-10-26 N/A 3.7 LOW
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a path traversal vulnerability.
CVE-2026-16894 1 Ibm 2 Aix, Vios 2026-10-26 N/A 9.8 CRITICAL
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVE-2026-3676 1 Ibm 1 Cloud Application Performance Managemen 2026-10-26 N/A 6.5 MEDIUM
IBM Cloud APM, Base Private 8.1.4 and IBM Cloud APM, Advanced Private 8.1.4 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of the Fenced environment.
CVE-2026-16886 1 Ibm 2 Aix, Vios 2026-10-26 N/A 4.3 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
CVE-2026-16875 1 Ibm 2 Aix, Vios 2026-10-26 N/A 7.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to shell metacharacter injection.
CVE-2026-5065 1 Ibm 1 Controller 2026-10-26 N/A 8.8 HIGH
IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
CVE-2026-16834 1 Ibm 2 Aix, Vios 2026-10-26 N/A 9.8 CRITICAL
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer underflow.
CVE-2026-16857 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.2 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication.
CVE-2026-19449 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root.
CVE-2026-18842 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.4 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write.
CVE-2026-16842 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-16945 1 Ibm 2 Aix, Vios 2026-10-26 N/A 7.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-16862 1 Ibm 2 Aix, Vios 2026-10-26 N/A 9.8 CRITICAL
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
CVE-2026-17436 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.
CVE-2026-16831 1 Ibm 2 Aix, Vios 2026-10-26 N/A 7.5 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-16849 1 Ibm 2 Aix, Vios 2026-10-26 N/A 4.3 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper check for an array index boundary.