CVE-2026-17424 | Vulnetix

CVE-2026-17424 PUBLISHED CVSS 4.8 MEDIUM

Reported by ibm · Published August 20, 2026

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to improper limitation of a pathname to a restricted directory.

Risk Scores

CVSS 3.1

4.8

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions
IBM	AIX	7.2, 7.3
IBM	PowerVM VIOS	4.1
IBM	PowerVM VIOS	4.1, 4.1
IBM	AIX	7.2, 7.3, 7.2

Timeline

Aug 15, 2026 CVE Published

References

vendor-advisorypatch

Open in Interactive Console →