CVE-2026-15065 | Vulnetix

CVE-2026-15065 PUBLISHED CVSS 9.1 CRITICAL

Reported by ibm · Published August 19, 2026

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file.

Risk Scores

CVSS 3.1

9.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

Vendor	Product	Versions
IBM	AIX	7.2, 7.3
IBM	PowerVM VIOS	4.1
IBM	AIX	7.2, 7.3, 7.2
IBM	PowerVM VIOS	4.1, 4.1

Timeline

Aug 15, 2026 CVE Published
Aug 22, 2026 Coalition ESS Score

References

vendor-advisorypatch

Open in Interactive Console →