CVE-2026-16888

Published: Aug 19, 2026Modified: Aug 20, 2026

3.7

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.2 / Impact: 1.4

Source: psirt@us.ibm.com (Secondary)

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a path traversal vulnerability.

Affected (7)

Products: Ibm: Vios, Aix

2 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Vios	From 4.1.0 to 4.1.0.50
Ibm Vios	From 4.1.1.0 to 4.1.1.30
Ibm Vios	From 4.1.2.0 to 4.1.2.20

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	From 7.2.5 to 7.2.5.212
Ibm Aix	From 7.3.2 to 7.3.2.5
Ibm Aix	From 7.3.3 to 7.3.3.2
Ibm Aix	From 7.3.4 to 7.3.4.1

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (1)

https://www.ibm.com/support/pages/node/7283858

Source: psirt@us.ibm.com

PatchVendor Advisory

Timeline

No history available yet.