CVE-2026-16923: IBM AIX vulnerability

Q: Is direct remote exploitation indicated?

No. The available information describes exploitation by a local attacker, so an attacker would need local access to an affected IBM AIX or IBM PowerVM VIOS system.

Q: Which environments should be prioritized for review?

Prioritize IBM AIX and IBM PowerVM VIOS systems that permit local access by users who should not be able to obtain elevated privileges. No affected versions or configuration conditions are provided.

Published Aug 15, 2026

Updated

AIX could allow a local attacker to gain elevated privileges due to improper privilege management.

Affected Software

3 affected components

IBM AIX<=7.2

IBM AIX<=7.3

IBM PowerVM VIOS<=4.1

Event History

Aug 15, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7283858

Frequently Asked Questions

Is direct remote exploitation indicated?

No. The available information describes exploitation by a local attacker, so an attacker would need local access to an affected IBM AIX or IBM PowerVM VIOS system.

Which environments should be prioritized for review?

Prioritize IBM AIX and IBM PowerVM VIOS systems that permit local access by users who should not be able to obtain elevated privileges. No affected versions or configuration conditions are provided.