CVE Catalog
CVE-2026-15065
CriticalCVSS 9.1Summary
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file.
Risk Assessment
An attacker can use the exposed keys to impersonate trusted components, potentially leading to system integrity compromise and loss of trust in the infrastructure.
Recommendation
Immediately revoke and replace the exposed keys, apply patches from IBM, and restrict access to update files.
Original NVD description (English source)
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file.