CVE Catalog

CVE-2026-16838

HighCVSS 7.0
Published: Translated: NVD NIST

Summary

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check to time-of-use (TOCTOU) race condition.

Risk Assessment

A local attacker could compromise system integrity and access sensitive data, potentially leading to privilege escalation.

Recommendation

Install security updates from IBM and restrict local access to the system.

Original NVD description (English source)

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check to time-of-use (TOCTOU) race condition.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS