NetSight
high8.8

CVE-2026-16848

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacter…

Impact

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP options.

Affected products

VendorProductAffected versions
IbmAix
from 7.2.5 through 7.2.5.212
from 7.3.2 through 7.3.2.5
from 7.3.3 through 7.3.3.2
from 7.3.4 through 7.3.4.1
IbmVios
from 4.1.0 before 4.1.0.50
from 4.1.1.0 before 4.1.1.30
from 4.1.2.0 before 4.1.2.20

Weakness classification

References