CVE Catalog

CVE-2026-16909

HighCVSS 8.8
Published: Translated: NVD NIST

Summary

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking.

Risk Assessment

A remote attacker could exploit the flaw to execute malicious code, potentially leading to full system compromise.

Recommendation

Install security updates from IBM for affected versions.

Original NVD description (English source)

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS