CVE-2026-16964 Vulnerabilities in IBM AIX and PowerVM VIOS

What is CVE-2026-16964?

CVE-2026-16964 is a medium-severity vulnerability in Ibm Aix, published on 20 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information.

Weakness: CWE-200

Which versions are affected by CVE-2026-16964?

It affects 2 products.

Products include Ibm Aix, Ibm Vios.

How do I fix CVE-2026-16964?

No fix has been published for CVE-2026-16964 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-16964 being exploited?

There is no known exploitation of CVE-2026-16964 in the wild and no public exploit code.

Other vulnerabilities in Ibm Aix

• CVE-2025-36250 AIX Code Execution Critical 10.0
• CVE-2024-56346 IBM AIX command execution Critical 10.0
• CVE-2010-3187 Memory corruption in n/a Critical 10.0
• CVE-2009-3699 Memory corruption in n/a Critical 10.0
• CVE-2009-3517 Auth bypass in n/a Critical 10.0

All Ibm Aix vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-mmff-8rp4-g72c.