CVE-2026-16821

Published: Aug 28, 2026Modified: Sep 2, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability.

Affected (7)

Products: Ibm: Aix, Vios

2 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	From 7.2.5.0 to 7.2.5.212
Ibm Aix	From 7.3.2 to 7.3.2.5
Ibm Aix	From 7.3.3 to 7.3.3.2
Ibm Aix	From 7.3.4 to 7.3.4.1

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Vios	From 4.1.0 to 4.1.0.50
Ibm Vios	From 4.1.1 to 4.1.1.30
Ibm Vios	From 4.1.2.0 to 4.1.2.20

Related CWEs

Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (1)

https://www.ibm.com/support/pages/node/7283858

Source: psirt@us.ibm.com

PatchVendor Advisory

Timeline

No history available yet.