# IBM Vios vulnerabilities

Source: https://junglewise.ai/threats/technologies/vios  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/vios.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 72 vulnerabilities in IBM Vios: 0 in the last 7 days and 68 in the last 90 days, 22 of them critical and 0 exploited in the wild. The most recent, CVE-2026-16919, was published on 19 August 2026. Nothing was published in the last eight weeks.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 68
- All time: 72 (22 critical, 0 exploited in the wild)

## About IBM Vios

IBM virtual input/output server providing logical partition management for Power Systems.

## Latest IBM Vios vulnerabilities

- [CVE-2026-16919: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper…](https://junglewise.ai/threats/cve-2026-16919-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16917: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer…](https://junglewise.ai/threats/cve-2026-16917-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16914: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an…](https://junglewise.ai/threats/cve-2026-16914-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-local) (medium, CVSS 6.7, published 19 Aug 2026)
- [CVE-2026-16913: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack…](https://junglewise.ai/threats/cve-2026-16913-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16911: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code…](https://junglewise.ai/threats/cve-2026-16911-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (high, CVSS 8.8, published 19 Aug 2026)
- [CVE-2026-16909: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an…](https://junglewise.ai/threats/cve-2026-16909-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (high, CVSS 8.8, published 19 Aug 2026)
- [CVE-2026-16903: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a…](https://junglewise.ai/threats/cve-2026-16903-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.6, published 19 Aug 2026)
- [CVE-2026-16901: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an…](https://junglewise.ai/threats/cve-2026-16901-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (high, CVSS 8.8, published 19 Aug 2026)
- [CVE-2026-16897: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an…](https://junglewise.ai/threats/cve-2026-16897-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-local) (medium, CVSS 4.4, published 19 Aug 2026)
- [CVE-2026-16894: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack…](https://junglewise.ai/threats/cve-2026-16894-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16891: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an…](https://junglewise.ai/threats/cve-2026-16891-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-local) (low, CVSS 3.3, published 19 Aug 2026)
- [CVE-2026-16890: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a…](https://junglewise.ai/threats/cve-2026-16890-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-local) (low, CVSS 3.6, published 19 Aug 2026)
- [CVE-2026-16888: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a…](https://junglewise.ai/threats/cve-2026-16888-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (low, CVSS 3.7, published 19 Aug 2026)
- [CVE-2026-16886: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an…](https://junglewise.ai/threats/cve-2026-16886-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (medium, CVSS 4.3, published 19 Aug 2026)
- [CVE-2026-16885: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack…](https://junglewise.ai/threats/cve-2026-16885-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16883: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an…](https://junglewise.ai/threats/cve-2026-16883-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-local) (medium, CVSS 5.5, published 19 Aug 2026)
- [CVE-2026-16882: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to…](https://junglewise.ai/threats/cve-2026-16882-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16877: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code…](https://junglewise.ai/threats/cve-2026-16877-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (high, CVSS 8.8, published 19 Aug 2026)
- [CVE-2026-16875: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to shell…](https://junglewise.ai/threats/cve-2026-16875-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-local) (high, CVSS 7.8, published 19 Aug 2026)
- [CVE-2026-16874: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper…](https://junglewise.ai/threats/cve-2026-16874-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-local) (high, CVSS 7.8, published 19 Aug 2026)
- [CVE-2026-16873: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due…](https://junglewise.ai/threats/cve-2026-16873-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-local) (high, CVSS 7.8, published 19 Aug 2026)
- [CVE-2026-16872: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based…](https://junglewise.ai/threats/cve-2026-16872-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16869: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly…](https://junglewise.ai/threats/cve-2026-16869-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-local) (high, CVSS 7.8, published 19 Aug 2026)
- [CVE-2026-16866: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an…](https://junglewise.ai/threats/cve-2026-16866-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (medium, CVSS 4.8, published 19 Aug 2026)
- [CVE-2026-16865: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command…](https://junglewise.ai/threats/cve-2026-16865-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (high, CVSS 8.8, published 19 Aug 2026)

## Most severe IBM Vios vulnerabilities

- [CVE-2025-36250: IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow…](https://junglewise.ai/threats/cve-2025-36250-ibm-aix-7-2-and-7-3-and-ibm-vios-3-1-and-4-1-nim-server-formerly) (critical, CVSS 10, published 13 Nov 2025)
- [CVE-2026-16816: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary…](https://junglewise.ai/threats/cve-2026-16816-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.9, published 19 Aug 2026)
- [CVE-2026-15068: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary…](https://junglewise.ai/threats/cve-2026-15068-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-nim-could-allow-a) (critical, CVSS 9.9, published 19 Aug 2026)
- [CVE-2026-16882: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to…](https://junglewise.ai/threats/cve-2026-16882-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16919: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper…](https://junglewise.ai/threats/cve-2026-16919-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16917: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer…](https://junglewise.ai/threats/cve-2026-16917-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16913: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack…](https://junglewise.ai/threats/cve-2026-16913-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16894: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack…](https://junglewise.ai/threats/cve-2026-16894-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16885: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack…](https://junglewise.ai/threats/cve-2026-16885-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)
- [CVE-2026-16872: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based…](https://junglewise.ai/threats/cve-2026-16872-ibm-aix-7-2-and-7-3-and-ibm-powervm-vios-4-1-could-allow-a-remote) (critical, CVSS 9.8, published 19 Aug 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 68 | 19 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other IBM technologies

- [IBM API Connect](https://junglewise.ai/threats/technologies/api-connect): 207 vulnerabilities
- [IBM AIX](https://junglewise.ai/threats/technologies/aix): 181 vulnerabilities
- [IBM Langflow](https://junglewise.ai/threats/technologies/langflow-oss): 154 vulnerabilities
- [IBM i](https://junglewise.ai/threats/technologies/i): 120 vulnerabilities
- [IBM Guardium Data Protection](https://junglewise.ai/threats/technologies/guardium-data-protection): 93 vulnerabilities
- [IBM PowerVM VIOS](https://junglewise.ai/threats/technologies/powervm-vios): 73 vulnerabilities
- [IBM WebSphere Application Server](https://junglewise.ai/threats/technologies/websphere-application-server): 67 vulnerabilities
- [IBM WebSphere Application Server Liberty](https://junglewise.ai/threats/technologies/websphere-application-server-liberty): 56 vulnerabilities
- [IBM Verify Identity Access](https://junglewise.ai/threats/technologies/verify-identity-access): 50 vulnerabilities
- [IBM Datastage On Cloud Pak For Data](https://junglewise.ai/threats/technologies/datastage-on-cloud-pak-for-data): 48 vulnerabilities
- [IBM Mq](https://junglewise.ai/threats/technologies/mq): 46 vulnerabilities
- [IBM Financial Transaction Manager](https://junglewise.ai/threats/technologies/financial-transaction-manager): 45 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "IBM Vios vulnerabilities", https://junglewise.ai/threats/technologies/vios, 9 November 2026.