CVE Catalog

CVE-2026-16850

HighCVSS 8.8
Published: Translated: NVD NIST

Summary

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements.

Risk Assessment

An attacker could gain control of the system, potentially leading to full compromise of the infrastructure.

Recommendation

Apply security patches from IBM and restrict trust in Router Advertisement messages on the network.

Original NVD description (English source)

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS