CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.01)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-19446
HighEPSS 61%

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 allow a remote unauthenticated attacker to send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart.

CVE-2026-19442
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 have a pointer validation flaw in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.

CVE-2026-19437
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

CVE-2026-18842
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write.

CVE-2026-18840
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer.

CVE-2026-18835
Critical

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVE-2026-18832
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.

CVE-2026-18828
Medium

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, a stack-based buffer overflow could allow a remote attacker to cause a denial of service.

CVE-2026-18824
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVE-2026-18822
Medium

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, uncontrolled resource consumption when parsing directory records could allow a local attacker to cause a denial of service.

CVE-2026-18716
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.

CVE-2026-18670
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to an integer underflow.

CVE-2026-17436
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.

CVE-2026-17425
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow.

CVE-2026-17424
Medium

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, improper limitation of a pathname to a restricted directory could allow a remote attacker to bypass security restrictions.

CVE-2026-17423
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds read.

CVE-2026-17422
Critical

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow.

CVE-2026-17195
Medium

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, an out-of-bounds write could allow a local attacker to cause a denial of service.

CVE-2026-17171
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary files due to improper resolution of symbolic links.

CVE-2026-17170
High

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an allocation size.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS