CVE-2026-18716: IBM AIX vulnerability

Q: What level of access does an attacker need?

An attacker must be remote and authenticated to exploit this issue.

Q: What impact can exploitation have?

Successful exploitation could allow an authenticated remote attacker to obtain sensitive information or cause a denial of service through an out-of-bounds read.

Q: Which products are identified as affected?

The affected software listed is IBM AIX and IBM PowerVM VIOS.

Published Aug 15, 2026

Updated

AIX could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.

Affected Software

3 affected components

IBM AIX<=7.2

IBM AIX<=7.3

IBM PowerVM VIOS<=4.1

Event History

Aug 15, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7283858

Frequently Asked Questions

What level of access does an attacker need?

An attacker must be remote and authenticated to exploit this issue.

What impact can exploitation have?

Successful exploitation could allow an authenticated remote attacker to obtain sensitive information or cause a denial of service through an out-of-bounds read.

Which products are identified as affected?