CVE-2026-18835 in AIX

الملخص

بحسب MITRE • 21/08/2026

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• مسؤول: Ibm
• حجز: 04/08/2026
• إفشاء: 21/08/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-393932
• CPE: جاهز
• CWE: CWE-78 (مؤكد)
• CVSS: 9.9 (CNA)
• EPSS: 0.00776
• KEV: لا
• النشاطات: منخفض
• القطاع: Hospital, Telecommunication, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-18835
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18835
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-18835/