CVE-2026-18824
Full vulnerability record from the local CVENow database.
Description
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
Severity
HIGH
CVSS score
8.8
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-08-20 22:17:16.930000
Last modified
2026-10-26 10:10:00.140000
View original CVE JSON
{
"id": "CVE-2026-18824",
"sourceIdentifier": "[email protected]",
"published": "2026-08-20T22:17:16.930",
"lastModified": "2026-10-26T10:10:00.140",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command."
},
{
"lang": "es",
"value": "IBM AIX 7.2, y 7.3 e IBM PowerVM VIOS 4.1 podría permitir a un atacante remoto autenticado ejecutar comandos arbitrarios debido a la neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "IBM",
"product": "AIX",
"cpes": [
"cpe:2.3:a:ibm:aix:7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:aix:7.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:aix:7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:aix:7.3.0:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "7.2",
"status": "affected"
},
{
"version": "7.3",
"status": "affected"
}
]
},
{
"vendor": "IBM",
"product": "PowerVM VIOS",
"cpes": [
"cpe:2.3:a:ibm:powervm_vios:4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_vios:4.1.0:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "4.1",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.7,
"impactScore": 6.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-21T00:00:00+00:00",
"id": "CVE-2026-18824",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.0",
"versionEndExcluding": "4.1.0.50",
"matchCriteriaId": "4A14B743-DDD2-467F-90E7-3431CE35F835"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.1.0",
"versionEndExcluding": "4.1.1.30",
"matchCriteriaId": "37B446F0-EE99-42EA-99EE-80E517FDCB78"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.2.0",
"versionEndExcluding": "4.1.2.20",
"matchCriteriaId": "6245F535-1896-4CC5-8EC9-89C8EF455B8C"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.2.5",
"versionEndIncluding": "7.2.5.212",
"matchCriteriaId": "EB84A37D-4C98-44FC-8B9B-E14DA7C88ED5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.2",
"versionEndIncluding": "7.3.2.5",
"matchCriteriaId": "EA55F75D-C50C-46D2-93CC-EABB8F49B03F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.3",
"versionEndIncluding": "7.3.3.2",
"matchCriteriaId": "B4115FCC-1026-417E-8D30-237B2C90367E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.4",
"versionEndIncluding": "7.3.4.1",
"matchCriteriaId": "340ADD53-8363-4CDA-AEEB-8DC7CB0088D5"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7283858",
"source": "[email protected]",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}