CVE-2026-15061: Vulnerabilities in IBM AIX and PowerVM VIOS
AIX's nimesis registration service could allow a remote attacker to overwrite files due to path traversal.
Other sources
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow a remote attacker to overwrite files due to path traversal.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM PowerVM VIOS 4.1.0to a version that resolves this vulnerability.Fixed in 4.1.0.50 - Upgrade
Upgrade
IBM PowerVM VIOS 4.1.1to a version that resolves this vulnerability.Fixed in 4.1.1.30 - Upgrade
Upgrade
IBM PowerVM VIOS 4.1.2to a version that resolves this vulnerability.Fixed in 4.1.2.20 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch IJ5956608 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch IJ5956508 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch IJ5956408 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch IJ59563 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch IJ5956308 - Operational
To complete the SP/FP update, reboot the LPAR.
- Operational
For VIOS 4.1.0 and VIOS 4.1.1, perform the additional steps to migrate to the latest Postgres15 after applying the 4.1.0.50 or 4.1.1.30 VIOS FPs, respectively.
- Operational
If applying AIX/VIOS patches using nimsh secure, take the special steps required because the protocol between master and client is updated to be more secure.
Event History
Frequently Asked Questions
Which systems are in scope?
IBM AIX 7.2 and 7.3, and IBM PowerVM VIOS 4.1, are identified as affected through the nimesis registration service. The provided information does not state whether the service is enabled by default.
What access does an attacker need?
The CVSS vector indicates network-based exploitation with low attack complexity. It requires no privileges and no user interaction.
What could successful exploitation do?
A remote attacker could overwrite files through path traversal in the nimesis registration service. The reported impact is high to integrity, low to availability, and none to confidentiality.