CVE-2026-16964

Received Received - Intake

IBM AIX and PowerVM VIOS Information Disclosure

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: IBM Corporation

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-20

Last Modified

2026-08-20

Generated

2026-08-21

AI Q&A

2026-08-21

EPSS Evaluated

N/A

NVD

CVE-2026-16964

EUVD

EUVD-2026-63700

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	aix	7.2
ibm	aix	7.3
ibm	powervm_vios	4.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 allows a remote attacker to intercept messages and forge replies. It is caused by the exposure of sensitive information, which could enable unauthorized access or manipulation of data.

Impact Analysis

The impact includes potential unauthorized interception of sensitive data, allowing attackers to read or alter messages. This could lead to data breaches, loss of confidentiality, or integrity issues in affected systems.

Compliance Impact

The vulnerability exposes sensitive information, which could lead to unauthorized access or data breaches. This may impact compliance with GDPR by violating data protection principles and HIPAA by compromising protected health information confidentiality.

Mitigation Strategies

Apply IBM AIX and PowerVM VIOS security patches or updates as soon as they become available to address the information exposure issue.

Hi! I’m here to help you understand CVE-2026-16964. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70