Vulnerability Details CVE-2026-16838
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check to time-of-use (TOCTOU) race condition.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 0.2%
CVSS Severity
CVSS v3 Score 7.0
Products affected by CVE-2026-16838
-
cpe:2.3:a:ibm:vios:4.1.2.0
-
cpe:2.3:o:ibm:aix:7.2.5
-
cpe:2.3:o:ibm:aix:7.2.5.0
-
cpe:2.3:o:ibm:aix:7.2.5.1
-
cpe:2.3:o:ibm:aix:7.2.5.100
-
cpe:2.3:o:ibm:aix:7.2.5.12
-
cpe:2.3:o:ibm:aix:7.3.2
-
cpe:2.3:o:ibm:aix:7.3.3
-
cpe:2.3:o:ibm:aix:7.3.4