Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

IBM AIX and PowerVM VIOS: Exposed Private Keys

CVE-2026-15065 · published 1 month ago
Summary

A security issue affects IBM AIX 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1 NIM. This means a hacker could access sensitive information and bypass security controls if they obtain an update file. To stay secure, update to the latest version of IBM AIX and PowerVM VIOS as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm aix 7.2
>= 7.2.5, <= 7.2.5.212
>= 7.3.2, <= 7.3.2.5
>= 7.3.3, <= 7.3.3.2
>= 7.3.4, <= 7.3.4.1
ibm powervm vios 4.1
ibm vios >= 4.1.0, < 4.1.0.50
>= 4.1.1.0, < 4.1.1.30
>= 4.1.2.0, < 4.1.2.20
cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*
Original advisory text
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly ...
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file.
References
Severity
9.1 Critical
CVSS 3.1: 9.1 (MITRE)
Exploitation
EPSS <1%
Type
CWE-312Cleartext Storage of Sensitive Information
Timeline
Published19 Aug 2026
Updated27 Sep 2026
First seen19 Aug 2026
Sources
CVE-2026-15065 · NVD
CVE-2026-15065 · MITRE
Track software like this
Free during beta