{"api_version":"1","generated_at":"2026-08-20T13:19:56+00:00","cve":"CVE-2026-16903","urls":{"html":"https://cve.report/CVE-2026-16903","api":"https://cve.report/api/cve/CVE-2026-16903.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-16903","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-16903"},"summary":{"title":"Vulnerabilities in IBM AIX and PowerVM VIOS","description":"IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a denial of service due to an out-of-bounds write.","state":"PUBLISHED","assigner":"ibm","published_at":"2026-08-19 20:17:10","updated_at":"2026-08-20 13:03:39"},"problem_types":["CWE-787","CWE-787 CWE-787 Out-of-bounds Write"],"metrics":[{"version":"3.1","source":"psirt@us.ibm.com","type":"Primary","score":"9.6","severity":"CRITICAL","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"9.6","severity":"CRITICAL","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","data":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":9.6,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"}}],"references":[{"url":"https://www.ibm.com/support/pages/node/7283858","name":"https://www.ibm.com/support/pages/node/7283858","refsource":"psirt@us.ibm.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16903","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16903","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"IBM","product":"AIX","version":"affected 7.2","platforms":[]},{"source":"CNA","vendor":"IBM","product":"AIX","version":"affected 7.3","platforms":[]},{"source":"CNA","vendor":"IBM","product":"PowerVM VIOS","version":"affected 4.1","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"A.  APARS\n\n\n\nIBM has assigned the following APARs to this problem:\n\nAIX LevelAPARAvailability  SPKEY7.2.5IJ5956608/14/2026SP13key_w_apar7.3.2IJ5956508/14/2026SP05key_w_apar7.3.3IJ5956408/14/2026SP03key_w_apar7.3.4IJ59563 08/14/2026SP02key_w_apar\n\n\n\n\n\nVIOS LevelAPARAvailability SPKEY4.1.0IJ5956508/14/20264.1.0.50key_w_apar4.1.1IJ5956408/14/20264.1.1.30key_w_apar4.1.2IJ5956308/14/20264.1.2.20key_w_apar\n\n\n\n\n\n\n\nB.  FIXES\n\n\n\nIBM strongly recommends addressing the vulnerability now.\n\n\n\n AIX and VIOS fixes are available and can be downloaded from Fix Central:  https://www.ibm.com/support/fixcentral \n\n\n\n An LPAR reboot is required to complete the SP/FP update. On AIX, Live Update can be used to avoid a reboot.\n\n\n\n IBM has assigned the following AIX Service Packs (SPs) and VIOS Fix Packs (FPs) as the remediation levels for the published vulnerabilities.\n\nAIX Level Service PackAIX 7.3 TL04SP2AIX 7.3 TL03SP3AIX 7.3 TL02SP5AIX 7.2 TL05 SP13\n\n\n\n\n\nPowerVM VIOS LevelFix PackVIOS 4.1.2 4.1.2.20VIOS 4.1.1 4.1.1.30VIOS 4.1.0  4.1.0.50\n\n\n\n\n\n\n\nNote: These SPs/FPs are cumulative and include fixes for all previously published AIX/VIOS security vulnerabilities. They can be applied on top of any earlier affected level of the TL .\n\n\n\nNote: To apply these patches using nimsh secure, special steps must be taken as the protocol between master and client is updated to be more secure. Please read this article:\n https://www.ibm.com/support/pages/node/7283157 \n\n\n\nNote: For VIOS 4.1.0 and VIOS 4.1.1, additional steps are required to migrate to the latest Postgres15 after applying the 4.1.1.30 or 4.1.0.50 FPs above. Instructions to do that can be found here:                  \n\n\n\n          4.1.0.50 post-update instructions:  https://www.ibm.com/support/pages/node/7283819 \n          4.1.1.30 post-update instructions:  https://www.ibm.com/support/pages/node/7283823","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"CVE-2026-14970, CVE-2026-15061, CVE-2026-15078, CVE-2026-15065, CVE-2026-15068 were reported to IBM by Oneconsult AG (https://oneconsult.com/).","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"cpes":["cpe:2.3:a:ibm:aix:7.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:aix:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:aix:7.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:aix:7.3.0:*:*:*:*:*:*:*"],"product":"AIX","vendor":"IBM","versions":[{"status":"affected","version":"7.2"},{"status":"affected","version":"7.3"}]},{"cpes":["cpe:2.3:a:ibm:powervm_vios:4.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_vios:4.1.0:*:*:*:*:*:*:*"],"product":"PowerVM VIOS","vendor":"IBM","versions":[{"status":"affected","version":"4.1"}]}],"credits":[{"lang":"en","type":"finder","value":"CVE-2026-14970, CVE-2026-15061, CVE-2026-15078, CVE-2026-15065, CVE-2026-15068 were reported to IBM by Oneconsult AG (https://oneconsult.com/)."}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a denial of service due to an out-of-bounds write.</p>"}],"value":"IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a denial of service due to an out-of-bounds write."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":9.6,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-08-19T19:55:08.421Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7283858"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p><strong>A.  APARS</strong></p><p>IBM has assigned the following APARs to this problem:</p><div><table><colgroup><col/><col/><col/><col/><col/></colgroup><tbody><tr><td><strong>AIX Level</strong></td><td><strong>APAR</strong></td><td><strong>Availability  </strong></td><td><strong>SP</strong></td><td><strong>KEY</strong></td></tr><tr><td>7.2.5</td><td>IJ59566</td><td>08/14/2026</td><td>SP13</td><td>key_w_apar</td></tr><tr><td>7.3.2</td><td>IJ59565</td><td>08/14/2026</td><td>SP05</td><td>key_w_apar</td></tr><tr><td>7.3.3</td><td>IJ59564</td><td>08/14/2026</td><td>SP03</td><td>key_w_apar</td></tr><tr><td>7.3.4</td><td>IJ59563 </td><td>08/14/2026</td><td>SP02</td><td>key_w_apar</td></tr></tbody></table></div><p></p><div><table><colgroup><col/><col/><col/><col/><col/></colgroup><tbody><tr><td><strong>VIOS Level</strong></td><td><strong>APAR</strong></td><td><strong>Availability </strong></td><td><strong>SP</strong></td><td><strong>KEY</strong></td></tr><tr><td>4.1.0</td><td>IJ59565</td><td>08/14/2026</td><td>4.1.0.50</td><td>key_w_apar</td></tr><tr><td>4.1.1</td><td>IJ59564</td><td>08/14/2026</td><td>4.1.1.30</td><td>key_w_apar</td></tr><tr><td>4.1.2</td><td>IJ59563</td><td>08/14/2026</td><td>4.1.2.20</td><td>key_w_apar</td></tr></tbody></table></div><p></p><p><strong>B.  FIXES</strong></p><p>IBM strongly recommends addressing the vulnerability now.</p><p> AIX and VIOS fixes are available and can be downloaded from Fix Central: <a href=\"https://www.ibm.com/support/fixcentral\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral</a></p><p> An LPAR reboot is required to complete the SP/FP update. On AIX, Live Update can be used to avoid a reboot.</p><p> IBM has assigned the following AIX Service Packs (SPs) and VIOS Fix Packs (FPs) as the remediation levels for the published vulnerabilities.</p><div><table><colgroup><col/><col/></colgroup><tbody><tr><td><strong>AIX Level </strong></td><td><strong>Service Pack</strong></td></tr><tr><td>AIX 7.3 TL04</td><td>SP2</td></tr><tr><td>AIX 7.3 TL03</td><td>SP3</td></tr><tr><td>AIX 7.3 TL02</td><td>SP5</td></tr><tr><td>AIX 7.2 TL05 </td><td>SP13</td></tr></tbody></table></div><p></p><div><table><colgroup><col/><col/></colgroup><tbody><tr><td><strong>PowerVM VIOS Level</strong></td><td><strong>Fix Pack</strong></td></tr><tr><td>VIOS 4.1.2 </td><td>4.1.2.20</td></tr><tr><td>VIOS 4.1.1 </td><td>4.1.1.30</td></tr><tr><td>VIOS 4.1.0  </td><td>4.1.0.50</td></tr></tbody></table></div><p></p><p><strong>Note:</strong> These SPs/FPs are cumulative and include fixes for all previously published AIX/VIOS security vulnerabilities. They can be applied on top of any earlier affected level of the TL .</p><p><strong>Note:</strong> To apply these patches using nimsh secure, special steps must be taken as the protocol between master and client is updated to be more secure. Please read this article:<br/><a href=\"https://www.ibm.com/support/pages/node/7283157\" rel=\"nofollow\">https://www.ibm.com/support/pages/node/7283157</a></p><p><strong>Note:</strong> For VIOS 4.1.0 and VIOS 4.1.1, additional steps are required to migrate to the latest Postgres15 after applying the 4.1.1.30 or 4.1.0.50 FPs above. Instructions to do that can be found here:                  </p><p>          4.1.0.50 post-update instructions: <a href=\"https://www.ibm.com/support/pages/node/7283819\" rel=\"nofollow\">https://www.ibm.com/support/pages/node/7283819</a><br/>          4.1.1.30 post-update instructions: <a href=\"https://www.ibm.com/support/pages/node/7283823\" rel=\"nofollow\">https://www.ibm.com/support/pages/node/7283823</a></p><p></p>"}],"value":"A.  APARS\n\n\n\nIBM has assigned the following APARs to this problem:\n\nAIX LevelAPARAvailability  SPKEY7.2.5IJ5956608/14/2026SP13key_w_apar7.3.2IJ5956508/14/2026SP05key_w_apar7.3.3IJ5956408/14/2026SP03key_w_apar7.3.4IJ59563 08/14/2026SP02key_w_apar\n\n\n\n\n\nVIOS LevelAPARAvailability SPKEY4.1.0IJ5956508/14/20264.1.0.50key_w_apar4.1.1IJ5956408/14/20264.1.1.30key_w_apar4.1.2IJ5956308/14/20264.1.2.20key_w_apar\n\n\n\n\n\n\n\nB.  FIXES\n\n\n\nIBM strongly recommends addressing the vulnerability now.\n\n\n\n AIX and VIOS fixes are available and can be downloaded from Fix Central:  https://www.ibm.com/support/fixcentral \n\n\n\n An LPAR reboot is required to complete the SP/FP update. On AIX, Live Update can be used to avoid a reboot.\n\n\n\n IBM has assigned the following AIX Service Packs (SPs) and VIOS Fix Packs (FPs) as the remediation levels for the published vulnerabilities.\n\nAIX Level Service PackAIX 7.3 TL04SP2AIX 7.3 TL03SP3AIX 7.3 TL02SP5AIX 7.2 TL05 SP13\n\n\n\n\n\nPowerVM VIOS LevelFix PackVIOS 4.1.2 4.1.2.20VIOS 4.1.1 4.1.1.30VIOS 4.1.0  4.1.0.50\n\n\n\n\n\n\n\nNote: These SPs/FPs are cumulative and include fixes for all previously published AIX/VIOS security vulnerabilities. They can be applied on top of any earlier affected level of the TL .\n\n\n\nNote: To apply these patches using nimsh secure, special steps must be taken as the protocol between master and client is updated to be more secure. Please read this article:\n https://www.ibm.com/support/pages/node/7283157 \n\n\n\nNote: For VIOS 4.1.0 and VIOS 4.1.1, additional steps are required to migrate to the latest Postgres15 after applying the 4.1.1.30 or 4.1.0.50 FPs above. Instructions to do that can be found here:                  \n\n\n\n          4.1.0.50 post-update instructions:  https://www.ibm.com/support/pages/node/7283819 \n          4.1.1.30 post-update instructions:  https://www.ibm.com/support/pages/node/7283823"}],"title":"Vulnerabilities in IBM AIX and PowerVM VIOS"}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2026-16903","datePublished":"2026-08-19T19:55:08.421Z","dateReserved":"2026-07-24T05:59:44.077Z","dateUpdated":"2026-08-19T19:55:08.421Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-08-19 20:17:10","lastModifiedDate":"2026-08-20 13:03:39","problem_types":["CWE-787","CWE-787 CWE-787 Out-of-bounds Write"],"metrics":{"cvssMetricV31":[{"source":"psirt@us.ibm.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"16903","Ordinal":"1","Title":"Vulnerabilities in IBM AIX and PowerVM VIOS","CVE":"CVE-2026-16903","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"16903","Ordinal":"1","NoteData":"IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a denial of service due to an out-of-bounds write.","Type":"Description","Title":"Vulnerabilities in IBM AIX and PowerVM VIOS"}]}}}