# CVE-2026-17024: Vulnerabilities in IBM AIX and PowerVM VIOS Status: published. Published: 2026-08-20. Updated: 2026-11-04. IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation. ## Remediation - fix: A.  APARS IBM has assigned the following APARs to this problem: AIX LevelAPARAvailability  SPKEY7.2.5IJ5956608/14/2026SP13key_w_apar7.3.2IJ5956508/14/2026SP05key_w_apar7.3.3IJ5956408/14/2026SP03key_w_apar7.3.4IJ59563 08/14/2026SP02key_w_apar VIOS LevelAPARAvailability SPKEY4.1.0IJ5956508/14/20264.1.0.50key_w_apar4.1.1IJ5956408/14/20264.1.1.30key_w_apar4.1.2IJ5956308/14/20264.1.2.20key_w_apar B.  FIXES IBM strongly recommends addressing the vulnerability now.  AIX and VIOS fixes are available and can be downloaded from Fix Central: https://www.ibm.com/support/fixcentral  An LPAR reboot is required to complete the SP/FP update. On AIX, Live Update can be used to avoid a reboot.  IBM has assigned the following AIX Service Packs (SPs) and VIOS Fix Packs (FPs) as the remediation levels for the published vulnerabilities. AIX Level Service PackAIX 7.3 TL04SP2AIX 7.3 TL03SP3AIX 7.3 TL02SP5AIX 7.2 TL05 SP13 PowerVM VIOS LevelFix PackVIOS 4.1.2 4.1.2.20VIOS 4.1.1 4.1.1.30VIOS 4.1.0  4.1.0.50 Note: These SPs/FPs are cumulative and include fixes for all previously published AIX/VIOS security vulnerabilities. They can be applied on top of any earlier affected level of the TL . Note: To apply these patches using nimsh secure, special steps must be taken as the protocol between master and client is updated to be more secure. Please read this article: https://www.ibm.com/support/pages/node/7283157 Note: For VIOS 4.1.0 and VIOS 4.1.1, additional steps are required to migrate to the latest Postgres15 after applying the 4.1.1.30 or 4.1.0.50 FPs above. Instructions to do that can be found here:                             4.1.0.50 post-update instructions: https://www.ibm.com/support/pages/node/7283819           4.1.1.30 post-update instructions: https://www.ibm.com/support/pages/node/7283823 (source: CNA: ibm) - fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: ibm) — https://www.ibm.com/support/pages/node/7283858 - fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: psirt@us.ibm.com) — https://www.ibm.com/support/pages/node/7283858 ## Affected products and versions - IBM / AIX: 7.2 (affected); 7.3 (affected). Source: CNA: ibm - IBM / PowerVM VIOS: 4.1 (affected). Source: CNA: ibm ## NVD configuration conditions Affected CPE matches depend on the following AND/OR and negation conditions: ```json [ { "negate": false, "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*", "versionEndExcluding": "4.1.0.50", "versionStartIncluding": "4.1.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*", "versionEndExcluding": "4.1.1.30", "versionStartIncluding": "4.1.1.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*", "versionEndExcluding": "4.1.2.20", "versionStartIncluding": "4.1.2.0", "vulnerable": true } ], "negate": false, "operator": "OR" } ], "operator": "OR" }, { "negate": false, "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*", "versionEndIncluding": "7.2.5.212", "versionStartIncluding": "7.2.5", "vulnerable": true }, { "criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*", "versionEndIncluding": "7.3.2.5", "versionStartIncluding": "7.3.2", "vulnerable": true }, { "criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*", "versionEndIncluding": "7.3.3.2", "versionStartIncluding": "7.3.3", "vulnerable": true }, { "criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*", "versionEndIncluding": "7.3.4.1", "versionStartIncluding": "7.3.4", "vulnerable": true } ], "negate": false, "operator": "OR" } ], "operator": "OR" } ] ``` ## Severity and prioritization - CVSS 3.1: 7.7 (high); CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H; source: CNA: ibm - CVSS 3.1: 9.8 (critical); CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; source: NVD: nvd@nist.gov - CVSS 3.1: 7.7 (high); CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H; source: NVD: psirt@us.ibm.com - CISA KEV: No listing in collected sources - EPSS: 0.35% as of 2026-11-03; percentile 28.96% - SSVC: exploitation none; automatable no; technical impact total; source ADP: CISA-ADP - Weaknesses: CWE-295 ## Exploit evidence No exploit evidence in collected sources. This is not proof of no exploitation. ## References - https://www.ibm.com/support/pages/node/7283858 (CNA: ibm; vendor-advisory, patch) - https://www.ibm.com/support/pages/node/7283858 (psirt@us.ibm.com; Patch, Vendor Advisory) ## Provenance - CNA: ibm: https://www.cve.org/CVERecord?id=CVE-2026-17024; retrieved 2026-11-04; source updated 2026-11-04 - NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-17024; retrieved 2026-11-04; source updated 2026-11-03 - FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2026-17024; retrieved 2026-11-03; source updated Not reported Revision: 5ad3b9b850e9d99cba8c831f985ab298bf54e46b97223a53f9ba1b35350273c6 Canonical: https://y2.dev/cve/CVE-2026-17024 ## Agent and API access Public CVE pages, Markdown, and JSON are free to read without an account or API key. - Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end. - WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers. - Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}. - Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer . Setup: https://y2.dev/docs/api/create-key. - x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402. - OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json. Collected public records only. Check source status for coverage and freshness.