CVE-2026-17024: Vulnerabilities in IBM AIX and PowerVM VIOS

Published Aug 15, 2026

Updated

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation.

Affected Software

10 affected components

IBM AIX<=7.2

IBM AIX<=7.3

IBM PowerVM VIOS<=4.1

IBM VIOS>=4.1.0<4.1.0.50

IBM VIOS>=4.1.1.0<4.1.1.30

IBM VIOS>=4.1.2.0<4.1.2.20

IBM AIX>=7.2.5<=7.2.5.212

IBM AIX>=7.3.2<=7.3.2.5

IBM AIX>=7.3.3<=7.3.3.2

IBM AIX>=7.3.4<=7.3.4.1

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade PowerVM VIOS 4.1.0 to a version that resolves this vulnerability.
Fixed in 4.1.0.50
Upgrade
Upgrade PowerVM VIOS 4.1.1 to a version that resolves this vulnerability.
Fixed in 4.1.1.30
Upgrade
Upgrade PowerVM VIOS 4.1.2 to a version that resolves this vulnerability.
Fixed in 4.1.2.20
Compensating control
Perform an LPAR reboot after applying the AIX SP/FP update to complete the SP/FP update.
Operational
For VIOS 4.1.0 and VIOS 4.1.1, follow the additional post-update steps to migrate to the latest Postgres15 after applying the VIOS 4.1.0.50 or 4.1.1.30 FPs, respectively.

Aug 15, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Aug 20, 2026

CVE Published

via MITRE·09:50 PM

Data Sourced

via MITRE·09:50 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

RemedyDescriptionSeverityWeaknessAffected Software

This vulnerability appears in the following advisories.