AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-16996

IBM AIX: code execution

IBM

CVE-2026-16996 · Published Aug 20, 2026 · updated Oct 27, 2026

High8.8
No fix yet
IBM advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow.

Affected versions

PackageAffectedFixed in
AIX
Product
<= 7.2No fix yet
<= 7.3No fix yet
PowerVM VIOS
Product
<= 4.1No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-787, CWE-191

More IBM advisories

All IBM
High 8.2Aug 20IBM AIX: denial of serviceCVE-2026-19442no fix yetHigh 7.5Aug 20IBM AIX: resource exhaustionCVE-2026-19446no fix yetMedium 6.5Aug 20IBM AIX: memory corruptionCVE-2026-19448no fix yetHigh 8.8Aug 20IBM AIX: improper privilege managementCVE-2026-19449no fix yetMedium 6.7Aug 20IBM AIX: memory corruptionCVE-2026-19783no fix yetMedium 5.4Aug 20IBM AIX: denial of serviceCVE-2026-18828no fix yet