CVE-2026-17160 CRITICAL

CVE-2026-17160: Vulnerabilities in IBM AIX and PowerVM VIOS

Vendor Ibm

Product AIX

Weakness CWE-190

Published August 20, 2026

Last update August 22, 2026

View on NVD All CVEs

CVSS base score

9.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation.

Key dates

02Disclosure timeline

August 20, 2026 CVE published

August 22, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-17160 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/190.html AskarLabs — CWE-190 write-up Integer Overflow or Wraparound

Identifiers

CVE CVE-2026-17160

CWE CWE-190

CVSS 9.8 / CRITICAL

Affected versions

Vendor Ibm

Product AIX

Affected 7.2

Vendor Ibm

Product AIX

Affected 7.3

Vendor Ibm

Product PowerVM VIOS

Affected 4.1