Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

IBM AIX and PowerVM allow remote file overwrite

CVE-2026-16926 · published 1 month ago
Summary

The AIX 7.2/7.3 operating system and PowerVM VIOS 4.1 can be tricked by a remote attacker into replacing any file on the server. This could let an attacker plant malicious code or disrupt services. Apply the latest security patches from IBM as soon as possible and restrict network access to these systems.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm aix 7.2
>= 7.2.5, <= 7.2.5.212
>= 7.3.2, <= 7.3.2.5
>= 7.3.3, <= 7.3.3.2
>= 7.3.4, <= 7.3.4.1
ibm powervm vios 4.1
ibm vios >= 4.1.0, < 4.1.0.50
>= 4.1.1.0, < 4.1.1.30
>= 4.1.2.0, < 4.1.2.20
cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*
Original advisory text
Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input.
References
Severity
9.1 Critical
CVSS 3.1: 9.1 (NVD)
Exploitation
EPSS <1%
Type
CWE-73External Control of File Name or Path
Timeline
Published20 Aug 2026
Updated27 Sep 2026
First seen20 Aug 2026
Sources
CVE-2026-16926 · NVD
CVE-2026-16926 · MITRE
Track software like this
Free during beta