CVE-2026-19442highCWE-822

CVE-2026-19442: high-severity vulnerability in IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

Published · Updated

Follow this CVE+ Monitor AIX+ Monitor PowerVM VIOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.2epss 0.2%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
IBM · AIXIBM · PowerVM VIOS
Related CVEs — IBM AIX

In the same product, most dangerous first.

CVE-2018-1383—CVE-2018-1383EPSS 2.7%CVE-2026-16865HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 1.9%CVE-2017-1541—CVE-2017-1541EPSS 1.5%CVE-2026-16850HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 1.5%CVE-2026-19446HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 1.5%CVE-2023-28528HIGHIBM AIX command executionEPSS 1.5%