CVE-2026-16866
Received Received - Intake

Denial of Service in IBM AIX and PowerVM VIOS

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: IBM Corporation

Description
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-20
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-16866
EUVD
EUVD-2026-62753

Affected Vendors & Products

Showing 6 associated CPEs
Vendor Product Version / Range
ibm aix 7.2
ibm aix 7.3
ibm powervm_vios 4.1
ibm aix From 7.2 (inc)
ibm aix From 7.3 (inc)
ibm powervm_vios From 4.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 allows a remote attacker to cause a denial of service through an out-of-bounds read issue.

Detection Guidance

This vulnerability is an out-of-bounds read issue in IBM AIX and PowerVM VIOS. Detection typically requires checking system logs for crashes or unusual behavior, as there are no specific public commands provided for this CVE. Monitor for service disruptions or application failures that may indicate exploitation.

Impact Analysis

The vulnerability may lead to system instability or crashes due to the denial of service, potentially disrupting services relying on affected IBM AIX or PowerVM VIOS systems.

Compliance Impact

The vulnerability causes a denial of service due to an out-of-bounds read in IBM AIX and PowerVM VIOS. This could lead to system instability or crashes, potentially disrupting data processing or availability. Compliance impacts depend on the affected system's role in handling regulated data, but no direct evidence links this specific vulnerability to GDPR or HIPAA violations.

Mitigation Strategies

Apply IBM-provided patches or updates for AIX 7.2, 7.3, and PowerVM VIOS 4.1 to address the out-of-bounds read issue. Monitor IBM security advisories for updates and restrict network access to affected systems until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16866. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart