vios vulnerabilities and fixes

Recent CVEs affecting vios, with upgrade or downgrade steps. 104 tracked.

vios has 104 tracked vulnerabilities, 20 critical. A fixed release or vendor patch exists for 104. Most recent: 2026-08-20. Highest priority: CVE-2026-16882 (score 57/100).

• CVE-2026-16882 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due
• CVE-2026-16885 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16894 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16877 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary
• CVE-2026-16824 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16903 CRITICAL 9.6 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause
• CVE-2026-16822 CRITICAL 9.3 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy serv
• CVE-2026-16901 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16909 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16827 MEDIUM 5.9 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16875 HIGH 7.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due t
• CVE-2026-16874 HIGH 7.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to im
• CVE-2026-16888 LOW 3.7 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information du
• CVE-2026-16873 HIGH 7.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalati
• CVE-2026-19653 MEDIUM 6.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to
• CVE-2026-16829 MEDIUM 5.3 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16825 MEDIUM 4.2 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive
• CVE-2026-16883 MEDIUM 5.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due
• CVE-2026-16886 MEDIUM 4.3 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16897 MEDIUM 4.4 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to
• CVE-2026-16890 LOW 3.6 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or
• CVE-2026-16891 LOW 3.3 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due
• CVE-2026-16840 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16845 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16862 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16864 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16913 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16917 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16919 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to i
• CVE-2026-17152 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-17157 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-17160 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16834 CRITICAL 9.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16865 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to c
• CVE-2026-19446 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP
• CVE-2026-16839 CRITICAL 9.4 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information du
• CVE-2026-16850 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to c
• CVE-2026-18835 CRITICAL 9.9 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary
• CVE-2026-16926 CRITICAL 9.1 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due t
• CVE-2026-16857 HIGH 8.2 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and
• CVE-2026-17436 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-18832 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-19437 HIGH 8.1 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-18670 HIGH 8.2 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and p
• CVE-2026-16911 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary
• CVE-2026-16831 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16836 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16852 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16924 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16928 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-17159 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-17163 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-17165 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-17170 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-17425 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-17168 HIGH 8.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary
• CVE-2026-18824 HIGH 8.4 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary
• CVE-2026-16842 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due
• CVE-2026-16844 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due
• CVE-2026-16848 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due
• CVE-2026-16841 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16847 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a
• CVE-2026-16972 MEDIUM 6.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information du
• CVE-2026-16837 HIGH 7.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-17423 HIGH 7.7 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information an
• CVE-2026-18716 HIGH 7.9 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive
• CVE-2026-16958 MEDIUM 6.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16964 MEDIUM 6.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge re
• CVE-2026-19448 MEDIUM 6.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec
• CVE-2026-17422 CRITICAL 9.3 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a
• CVE-2026-16932 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due t
• CVE-2026-16833 MEDIUM 5.3 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to a
• CVE-2026-16851 HIGH 7.4 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16934 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to
• CVE-2026-16936 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a
• CVE-2026-19449 HIGH 8.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged loc
• CVE-2026-18842 HIGH 8.4 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to
• CVE-2026-16943 HIGH 8.2 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a
• CVE-2026-18828 MEDIUM 5.4 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-18840 HIGH 8.2 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to im
• CVE-2026-19442 HIGH 8.2 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vS
• CVE-2026-16846 MEDIUM 6.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16866 MEDIUM 4.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16869 HIGH 7.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to im
• CVE-2026-16945 HIGH 7.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a
• CVE-2026-17171 HIGH 7.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary files due to
• CVE-2026-17424 MEDIUM 4.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions du
• CVE-2026-16935 HIGH 7.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to
• CVE-2026-16937 HIGH 7.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to
• CVE-2026-16946 HIGH 7.8 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to
• CVE-2026-16927 HIGH 7.3 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a ti
• CVE-2026-16838 HIGH 7.0 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obt
• CVE-2026-16914 MEDIUM 6.7 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an
• CVE-2026-16922 HIGH 7.0 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a
• CVE-2026-16923 HIGH 7.0 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to
• CVE-2026-16925 HIGH 7.1 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due
• CVE-2026-16944 MEDIUM 6.7 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a
• CVE-2026-16951 MEDIUM 6.7 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary
• CVE-2026-19783 MEDIUM 6.7 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption d
• CVE-2026-17195 MEDIUM 6.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to
• CVE-2026-16849 MEDIUM 4.3 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due t
• CVE-2026-16855 MEDIUM 5.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to
• CVE-2026-16952 MEDIUM 5.5 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to
• CVE-2026-18822 MEDIUM 4.4 UPGRADE UPGRADE IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to

FAQ

How do I fix vios vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is vios being exploited right now?

None of the tracked vios CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which vios CVE should I patch first?

CVE-2026-16882 currently ranks highest (57/100): IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due .

← Back to latest CVEs