CVE-2026-19449: IBM AIX vulnerability

An unprivileged local user may be able to exploit the vulnerability. The provided information does not indicate that it is remotely exploitable.

Successful exploitation may cause an attacker-controlled payload to execute as root, resulting in root-level privileges.

Assess IBM AIX systems and IBM PowerVM VIOS systems, as both are listed as affected software.

Published Aug 15, 2026

Updated

AIX has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root.

Affected Software

3 affected components

IBM AIX<=7.2

IBM AIX<=7.3

IBM PowerVM VIOS<=4.1

Aug 15, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

This vulnerability appears in the following advisories.

An unprivileged local user may be able to exploit the vulnerability. The provided information does not indicate that it is remotely exploitable.

Successful exploitation may cause an attacker-controlled payload to execute as root, resulting in root-level privileges.

Assess IBM AIX systems and IBM PowerVM VIOS systems, as both are listed as affected software.