CVE Catalog

CVE-2026-16816

CriticalCVSS 9.9
Published: Translated: NVD NIST

Summary

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Risk Assessment

An authenticated attacker can execute arbitrary commands on the system, potentially leading to full system compromise or data theft.

Recommendation

Apply security patches provided by IBM for AIX and VIOS. Restrict user privileges and monitor system activity.

Original NVD description (English source)

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS