CVE-2026-16818: Vulnerabilities in IBM AIX and PowerVM VIOS

Published Aug 15, 2026

Updated

AIX could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

Other sources

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

— MITRE

3 affected components

IBM AIX<=7.2

IBM AIX<=7.3

IBM PowerVM VIOS<=4.1

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM PowerVM VIOS 4.1.0 to a version that resolves this vulnerability.
Fixed in 4.1.0.50Patch IJ5956508/14/2026
Upgrade
Upgrade IBM PowerVM VIOS 4.1.1 to a version that resolves this vulnerability.
Fixed in 4.1.1.30Patch IJ5956408/14/2026
Upgrade
Upgrade IBM PowerVM VIOS 4.1.2 to a version that resolves this vulnerability.
Fixed in 4.1.2.20Patch IJ5956308/14/2026
Compensating control
For VIOS 4.1.0 and VIOS 4.1.1: after applying the 4.1.0.50 or 4.1.1.30 FPs, complete the additional steps required to migrate to the latest Postgres15.
Compensating control
An LPAR reboot is required to complete the SP/FP update.

Aug 15, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Aug 19, 2026

CVE Published

via MITRE·03:03 PM

Data Sourced

via MITRE·03:03 PM

RemedyDescriptionSeverityWeakness

This vulnerability appears in the following advisories.