CVE Catalog
CVE-2026-15068
CriticalCVSS 9.9Summary
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
Risk Assessment
An authenticated attacker can execute arbitrary commands in the NIM context, potentially leading to system integrity compromise or lateral movement.
Recommendation
Apply security patches from IBM for NIM. Restrict access to NIM services and monitor administrative actions.
Original NVD description (English source)
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.