Description
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input.
Published: 2026-08-20
Score: 9.1 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

This vulnerability affects IBM AIX versions 7.2 and 7.3 as well as IBM PowerVM VIOS 4.1. An improperly neutralized special element in input can cause the operating system to write data to an arbitrary file path. Because the attack may create or overwrite executables, configuration files, or other critical system files, a remote attacker can gain elevated privileges, compromise the integrity of the system, or execute arbitrary code. The weakness is classified as Input Validation (CWE-73).

Affected Systems

IBM AIX 7.2 and 7.3 TL04, TL03, TL02, and TL05 (SP13) are affected, along with IBM PowerVM VIOS 4.1.0, 4.1.1, and 4.1.2. The remediation levels are cumulative; for AIX the relevant Service Packs are SP2 for TL04, SP3 for TL03, and SP5 for TL02, while for VIOS the corresponding Fix Packs are 4.1.0.50, 4.1.1.30, and 4.1.2.20.

Risk and Exploitability

The CVSS score of 9.1 indicates a high impact and high exploitation potential. The EPSS score is not available, so the current likelihood of exploitation is uncertain. This vulnerability is not listed in the CISA KEV catalog. The attack vector is likely remote, as the description specifies a remote attacker can trigger the file overwrite through crafted input.

Generated by OpenCVE AI on August 20, 2026 at 21:11 UTC.

Remediation

Vendor Solution

A.  APARS IBM has assigned the following APARs to this problem: AIX LevelAPARAvailability  SPKEY7.2.5IJ5956608/14/2026SP13key_w_apar7.3.2IJ5956508/14/2026SP05key_w_apar7.3.3IJ5956408/14/2026SP03key_w_apar7.3.4IJ59563 08/14/2026SP02key_w_apar VIOS LevelAPARAvailability SPKEY4.1.0IJ5956508/14/20264.1.0.50key_w_apar4.1.1IJ5956408/14/20264.1.1.30key_w_apar4.1.2IJ5956308/14/20264.1.2.20key_w_apar B.  FIXES IBM strongly recommends addressing the vulnerability now.  AIX and VIOS fixes are available and can be downloaded from Fix Central: https://www.ibm.com/support/fixcentral  An LPAR reboot is required to complete the SP/FP update. On AIX, Live Update can be used to avoid a reboot.  IBM has assigned the following AIX Service Packs (SPs) and VIOS Fix Packs (FPs) as the remediation levels for the published vulnerabilities. AIX Level Service PackAIX 7.3 TL04SP2AIX 7.3 TL03SP3AIX 7.3 TL02SP5AIX 7.2 TL05 SP13 PowerVM VIOS LevelFix PackVIOS 4.1.2 4.1.2.20VIOS 4.1.1 4.1.1.30VIOS 4.1.0  4.1.0.50 Note: These SPs/FPs are cumulative and include fixes for all previously published AIX/VIOS security vulnerabilities. They can be applied on top of any earlier affected level of the TL . Note: To apply these patches using nimsh secure, special steps must be taken as the protocol between master and client is updated to be more secure. Please read this article: https://www.ibm.com/support/pages/node/7283157 Note: For VIOS 4.1.0 and VIOS 4.1.1, additional steps are required to migrate to the latest Postgres15 after applying the 4.1.1.30 or 4.1.0.50 FPs above. Instructions to do that can be found here:                             4.1.0.50 post-update instructions: https://www.ibm.com/support/pages/node/7283819           4.1.1.30 post-update instructions: https://www.ibm.com/support/pages/node/7283823

OpenCVE Recommended Actions

  • Download and install the appropriate IBM AIX Service Pack or PowerVM VIOS Fix Pack from Fix Central (e.g., AIX SP2 for TL04, SP3 for TL03, SP5 for TL02, or SP13 for TL05; or VIOS 4.1.0.50, 4.1.1.30, or 4.1.2.20).
  • Reboot the LPAR to complete the update; if using AIX, use Live Update to avoid a reboot if possible.
  • For VIOS 4.1.0 and 4.1.1, after applying the fix pack, migrate to Postgres15 following the post‑update instructions linked in the advisory (4.1.0.50: https://www.ibm.com/support/pages/node/7283819; 4.1.1.30: https://www.ibm.com/support/pages/node/7283823).
  • When applying the patches, follow the nimsh secure protocol changes as documented at https://www.ibm.com/support/pages/node/7283157.

Generated by OpenCVE AI on August 20, 2026 at 21:11 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 25 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Ibm vios
CPEs cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*
Vendors & Products Ibm vios

Tue, 25 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 20 Aug 2026 15:00:00 +0000

Type Values Removed Values Added
Description IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input.
Title Vulnerabilities in IBM AIX and PowerVM VIOS
First Time appeared Ibm
Ibm aix
Ibm powervm Vios
Weaknesses CWE-73
CPEs cpe:2.3:a:ibm:aix:7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:aix:7.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:aix:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:aix:7.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powervm_vios:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powervm_vios:4.1:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm aix
Ibm powervm Vios
References
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H'}

Subscriptions

Ibm Aix Powervm Vios Vios
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-08-25T14:40:43.875Z

Reserved: 2026-07-24T07:15:31.515Z

Link: CVE-2026-16926

cve-icon Vulnrichment

Updated: 2026-08-25T14:40:36.809Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-20T15:17:28.963

Modified: 2026-08-25T16:22:03.397

Link: CVE-2026-16926

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-20T21:15:05Z

Weaknesses
  • CWE-73

    External Control of File Name or Path