CVE-2026-16891: IBM AIX vulnerability

Q: Who can exploit this issue?

Exploitation requires local access to an affected IBM AIX or IBM PowerVM VIOS system. The available information does not indicate that it can be exploited remotely.

Q: What is the potential impact?

A local attacker may obtain sensitive information through an out-of-bounds read.

Published Aug 15, 2026

Updated

AIX could allow a local attacker to obtain sensitive information due to an out-of-bounds read.

Affected Software

3 affected components

IBM AIX<=7.2

IBM AIX<=7.3

IBM PowerVM VIOS<=4.1

Event History

Aug 15, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7283858

Frequently Asked Questions

Who can exploit this issue?

Exploitation requires local access to an affected IBM AIX or IBM PowerVM VIOS system. The available information does not indicate that it can be exploited remotely.

What is the potential impact?

A local attacker may obtain sensitive information through an out-of-bounds read.