CVE-2026-16989: IBM AIX vulnerability
Published Aug 15, 2026
·Updated
AIX could allow a local attacker to gain elevated privileges due to improper resolution of symbolic links.
Affected Software
3 affected components
IBM AIX<=7.2
IBM AIX<=7.3
IBM PowerVM VIOS<=4.1
Event History
Aug 15, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
Which systems should be assessed for exposure?
Assess IBM AIX and IBM PowerVM VIOS systems, which are identified as affected software.
2
What level of access does an attacker need?
The issue is described as exploitable by a local attacker. The provided information does not identify any remote attack path.