CVE-2026-16919

Analyzed Analyzed - Analysis Complete

Remote Code Execution in IBM AIX and PowerVM VIOS

Publication date: 2026-08-19

Last updated on: 2026-08-27

Assigner: IBM Corporation

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-27

Generated

2026-09-09

AI Q&A

2026-08-20

EPSS Evaluated

2026-09-07

NVD

CVE-2026-16919

EUVD

EUVD-2026-62835

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	aix	From 7.2.5 (inc) to 7.2.5.212 (inc)
ibm	aix	From 7.3.2 (inc) to 7.3.2.5 (inc)
ibm	aix	From 7.3.3 (inc) to 7.3.3.2 (inc)
ibm	aix	From 7.3.4 (inc) to 7.3.4.1 (inc)
ibm	vios	From 4.1.0 (inc) to 4.1.0.50 (exc)
ibm	vios	From 4.1.1.0 (inc) to 4.1.1.30 (exc)
ibm	vios	From 4.1.2.0 (inc) to 4.1.2.20 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-843	The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 allows a remote attacker to execute arbitrary code. It occurs due to improper validation of network-supplied pointers, meaning the system fails to properly check or sanitize pointers received over the network before using them.

Detection Guidance

Detection requires checking for IBM AIX 7.2, 7.3, or PowerVM VIOS 4.1 versions and verifying if network-supplied pointers are improperly validated. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to run malicious code on your system remotely, potentially leading to unauthorized access, data theft, or system compromise. This could disrupt services, steal sensitive information, or allow further attacks within your network.

Compliance Impact

This vulnerability could lead to data breaches, which may violate GDPR or HIPAA requirements for data protection and confidentiality. Organizations could face legal penalties, reputational damage, and loss of trust due to non-compliance resulting from a successful exploit.

Mitigation Strategies

Apply IBM-provided patches or updates for AIX 7.2, 7.3, and PowerVM VIOS 4.1 immediately. Isolate affected systems from untrusted networks until patched. Monitor IBM security advisories for updates.

Hi! I’m here to help you understand CVE-2026-16919. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70