CVE-2026-19449

Published: Aug 20, 2026Modified: Aug 25, 2026

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: psirt@us.ibm.com (Secondary)

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root.

Affected (7)

Products: Ibm: Vios, Aix

Ibm

2 products

Vios

Aix

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Vios	From 4.1.0 to 4.1.0.50
Ibm Vios	From 4.1.1.0 to 4.1.1.30
Ibm Vios	From 4.1.2.0 to 4.1.2.20

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	From 7.2.5 to 7.2.5.212
Ibm Aix	From 7.3.2 to 7.3.2.5
Ibm Aix	From 7.3.3 to 7.3.3.2
Ibm Aix	From 7.3.4 to 7.3.4.1

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

https://www.ibm.com/support/pages/node/7283858

Source: psirt@us.ibm.com

PatchVendor Advisory

Timeline

No history available yet.