CVE Catalog

CVE-2026-15078

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Summary

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX systems due to improper validation of TLS certificates.

Risk Assessment

Improper TLS certificate validation could allow an attacker to impersonate a trusted server and gain unauthorized access to systems, potentially leading to full compromise.

Recommendation

It is recommended to apply patches from IBM and configure proper TLS certificate validation in the NIM service.

Original NVD description (English source)

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX systems due to improper validation of TLS certificates.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS