CVE-2026-16874 | Vulnetix

CVE-2026-16874 PUBLISHED CVSS 7.8 HIGH

Reported by ibm · Published August 19, 2026

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles.

Risk Scores

CVSS 3.1

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
IBM	AIX	7.2, 7.3
IBM	PowerVM VIOS	4.1
IBM	PowerVM VIOS	4.1, 4.1, 4.1
IBM	AIX	7.2, 7.3, 7.2

Timeline

Aug 15, 2026 CVE Published

References

vendor-advisorypatch

Open in Interactive Console →