CVE-2026-14514 PUBLISHED

Reliable Scalable Cluster Technology Denial-of-Service

Assigner: ibm
Reserved: 02.07.2026 Published: 19.08.2026 Updated: 19.08.2026

IBM Reliable Scalable Cluster Technology (RSCT) 3.0 could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 6.5

Attack Vector	Adjacent Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	None
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	IBM
Product	Reliable Scalable Cluster Technology (RSCT)
Versions	Version 3.0 is affected

Solutions

A. APARS

IBM has assigned the following APAR to this problem:

APARAvailability IJ5899008/14/2026

B. FIXES

IBM strongly recommends addressing the vulnerability now.

AIX and VIOS levels including the fix for RSCT vulnerability are available and can be downloaded from Fix Central: https://www.ibm.com/support/fixcentral

AIX Level Service PackAIX 7.3 TL04SP2AIX 7.3 TL03SP3AIX 7.3 TL02SP5AIX 7.2 TL05 SP13

PowerVM VIOS LevelFix PackVIOS 4.1.2 4.1.2.20VIOS 4.1.1 4.1.1.30VIOS 4.1.0 4.1.0.50

References

https://www.ibm.com/support/pages/node/7283963

Problem Types

CWE-770 Allocation of Resources Without Limits or Throttling CWE