CVE-2026-18840

No fix known EPSS <1%CVSS 8.2

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer.

Published 2026-08-20 · CVE record · OSV

Products: ibm aix, IBM PowerVM VIOS