CVE Feed

    Dashboard / CVE / CVE-2026-17093

    CVE-2026-17093

    IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level access to the BMC/FSP can supply specially crafted configuration data, compromising the host firmware boot stage and everything subsequently loaded by it, resulting in a confidentiality, integrity, and availability impact to the managed system.

    Published:Aug 19, 2026
    Last Modified:Aug 25, 2026
    EPS:Aug 19, 2026
    EPSS Score:0.00115
    CVSS Score:8.2

    Affected Products

    Vendor
    Ibm
    Product
    Power Hardware Management Console \(7063-cr2\)
    Vendor
    Ibm
    Product
    Power Hardware Management Console \(7063-cr2\) Firmware
    Vendor
    Ibm
    Product
    Power System Ac922 \(8335-gth\)
    Vendor
    Ibm
    Product
    Power System Ac922 \(8335-gth\) Firmware
    Vendor
    Ibm
    Product
    Power System Ac922 \(8335-gtx\)
    Vendor
    Ibm
    Product
    Power System Ac922 \(8335-gtx\) Firmware
    Vendor
    Ibm
    Product
    Power System E1050 \(9043-mrx\)
    Vendor
    Ibm
    Product
    Power System E1050 \(9043-mrx\) Firmware
    Vendor
    Ibm
    Product
    Power System E1080 \(9080-hex\)
    Vendor
    Ibm
    Product
    Power System E1080 \(9080-hex\) Firmware
    Vendor
    Ibm
    Product
    Power System E1150 \(9043-mru\)
    Vendor
    Ibm
    Product
    Power System E1150 \(9043-mru\) Firmware
    Vendor
    Ibm
    Product
    Power System E1180 \(9080-heu\)
    Vendor
    Ibm
    Product
    Power System E1180 \(9080-heu\) Firmware
    Vendor
    Ibm
    Product
    Power System E950 \(9040-mr9\)
    Vendor
    Ibm
    Product
    Power System E950 \(9040-mr9\) Firmware
    Vendor
    Ibm
    Product
    Power System E980 \(9080-m9s\)
    Vendor
    Ibm
    Product
    Power System E980 \(9080-m9s\) Firmware
    Vendor
    Ibm
    Product
    Power System H922 \(9223-22s\)
    Vendor
    Ibm
    Product
    Power System H922 \(9223-22s\) Firmware
    Vendor
    Ibm
    Product
    Power System H924 \(9223-42s\)
    Vendor
    Ibm
    Product
    Power System H924 \(9223-42s\) Firmware
    Vendor
    Ibm
    Product
    Power System L1022 \(9786-22h\)
    Vendor
    Ibm
    Product
    Power System L1022 \(9786-22h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1024 \(9786-42h\)
    Vendor
    Ibm
    Product
    Power System L1024 \(9786-42h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1122 \(9856-22h\)
    Vendor
    Ibm
    Product
    Power System L1122 \(9856-22h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1124 \(9856-42h\)
    Vendor
    Ibm
    Product
    Power System L1124 \(9856-42h\) Firmware
    Vendor
    Ibm
    Product
    Power System S1012 \(9028-21b\)
    Vendor
    Ibm
    Product
    Power System S1012 \(9028-21b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1014 \(9105-41b\)
    Vendor
    Ibm
    Product
    Power System S1014 \(9105-41b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1022 \(9105-22a\)
    Vendor
    Ibm
    Product
    Power System S1022 \(9105-22a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1022s \(9105-22b\)
    Vendor
    Ibm
    Product
    Power System S1022s \(9105-22b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1024 \(9105-42a\)
    Vendor
    Ibm
    Product
    Power System S1024 \(9105-42a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21b\)
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21t\)
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21t\) Firmware
    Vendor
    Ibm
    Product
    Power System S1114 \(9824-41b\)
    Vendor
    Ibm
    Product
    Power System S1114 \(9824-41b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1122 \(9824-22a\)
    Vendor
    Ibm
    Product
    Power System S1122 \(9824-22a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1122s \(9824-22b\)
    Vendor
    Ibm
    Product
    Power System S1122s \(9824-22b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1124 \(9824-42a\)
    Vendor
    Ibm
    Product
    Power System S1124 \(9824-42a\) Firmware
    Vendor
    Ibm
    Product
    Power System S914 \(9009-41g\)
    Vendor
    Ibm
    Product
    Power System S914 \(9009-41g\) Firmware
    Vendor
    Ibm
    Product
    Power System S922 \(9009-22g\)
    Vendor
    Ibm
    Product
    Power System S922 \(9009-22g\) Firmware
    Vendor
    Ibm
    Product
    Power System S924 \(9009-42g\)
    Vendor
    Ibm
    Product
    Power System S924 \(9009-42g\) Firmware
    Vendor
    Ibm
    Product
    Power Systems Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-121 Stack-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High