CVE-2026-15065
Received Received - Intake

Exposure of Private Keys in IBM AIX and PowerVM VIOS

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: IBM Corporation

Description
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-15065
EUVD
EUVD-2026-62424

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
ibm aix 7.2
ibm aix 7.3
ibm powervm_vios 4.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-312 The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 NIM have a vulnerability where intermediate certificate authority private keys were exposed in a publicly available update file. This allows a remote attacker to bypass security restrictions by exploiting these exposed keys.

Impact Analysis

This vulnerability could allow attackers to impersonate trusted entities, decrypt communications, or perform unauthorized actions on affected systems. It compromises the integrity of secure communications and data exchanges.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and encryption standards in GDPR and HIPAA. Exposure of private keys undermines secure data handling and could lead to regulatory penalties.

Mitigation Strategies

Remove the affected update file containing exposed intermediate certificate authority private keys from IBM AIX 7.2, 7.3, or PowerVM VIOS 4.1 NIM systems. Verify no other systems have downloaded or installed the compromised file.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-15065. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart