Aix - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/aix/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 19 Aug 2026 16:37:59 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgExposure of Certificate Authority Private Keys in IBM AIX and PowerVM VIOShttps://feed.craftedsignal.io/briefs/2026-08-ibm-aix-cve-2026-15065/Wed, 19 Aug 2026 16:37:59 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-08-ibm-aix-cve-2026-15065/IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain intermediate CA private keys within publicly available update files, potentially allowing remote attackers to bypass security restrictions.IBM has disclosed a critical security vulnerability (CVE-2026-15065) affecting IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS version 4.1. The vulnerability originates from the inclusion of intermediate Certificate Authority (CA) private keys within a publicly available update file. Exposure of these keys (CWE-312) poses a significant risk to the integrity of systems relying on trust chains derived from these certificates. A remote attacker who obtains these keys could potentially impersonate legitimate services, bypass security restrictions, and perform unauthorized actions within the affected environment. The vulnerability has been assigned a CVSS v3.1 base score of 9.1, reflecting the critical impact of leaked cryptographic infrastructure credentials.

Impact

Successful exploitation allows remote attackers to perform unauthorized actions by leveraging the compromised intermediate CA private keys. This can lead to man-in-the-middle attacks, unauthorized access to secure communications, or the bypass of authentication controls that rely on the affected certificate chain. The scope of impact includes any environment utilizing these versions of AIX or PowerVM VIOS for enterprise-level identity or security services.

Recommendation

  • Review the official IBM support advisory at https://www.ibm.com/support/pages/node/7283858 for remediation guidance and patch availability.
  • Apply available security patches to all affected AIX 7.2, 7.3, and PowerVM VIOS 4.1 instances immediately.
  • Conduct a cryptographic audit of infrastructure utilizing these systems to determine if any certificate chains anchored to the exposed CA were compromised or used to sign potentially malicious traffic.
  • Revoke and reissue any certificates issued by the compromised intermediate CA if signs of unauthorized use are identified.
]]>highadvisoryvulnerabilitycve-2026-15065ibmsecurity-bypassdenial-of-serviceaix