CVE-2026-17006
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
CVSS
8.3
High
EPSS
0.4%
p34
KEV
—
Exploit Today
10
0-100
Published: Aug 20, 2026 · Last modified: Aug 27, 2026 · CWE-787
0.2%EPSS · 30 days0.4%
2026-08-252026-09-22
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-180958.5 HIG—
———IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.10hCVE-2026-176368.8 HIG—
———IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity.10hCVE-2026-871219.8 CRI—
———lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device.11hCVE-2026-958627.5 HIG—
——0A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.12hCVE-2026-839637.8 HIG—
——0Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.4hCVE-2026-819987.8 HIG—
——0Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.4h