CVE Feed

    Dashboard / CVE / CVE-2026-17494

    CVE-2026-17494

    IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

    Published:Aug 19, 2026
    Last Modified:Aug 25, 2026
    EPS:Aug 19, 2026
    EPSS Score:0.00115
    CVSS Score:8.2

    Affected Products

    Vendor
    Ibm
    Product
    Power System E1150 \(9043-mru\)
    Vendor
    Ibm
    Product
    Power System E1150 \(9043-mru\) Firmware
    Vendor
    Ibm
    Product
    Power System E1180 \(9080-heu\)
    Vendor
    Ibm
    Product
    Power System E1180 \(9080-heu\) Firmware
    Vendor
    Ibm
    Product
    Power System L1122 \(9856-22h\)
    Vendor
    Ibm
    Product
    Power System L1122 \(9856-22h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1124 \(9856-42h\)
    Vendor
    Ibm
    Product
    Power System L1124 \(9856-42h\) Firmware
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21b\)
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21t\)
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21t\) Firmware
    Vendor
    Ibm
    Product
    Power System S1114 \(9824-41b\)
    Vendor
    Ibm
    Product
    Power System S1114 \(9824-41b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1122 \(9824-22a\)
    Vendor
    Ibm
    Product
    Power System S1122 \(9824-22a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1122s \(9824-22b\)
    Vendor
    Ibm
    Product
    Power System S1122s \(9824-22b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1124 \(9824-42a\)
    Vendor
    Ibm
    Product
    Power System S1124 \(9824-42a\) Firmware
    Vendor
    Ibm
    Product
    Power Systems Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-121 Stack-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-4936 (CVSS 5.1) — IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through …
    CVE-2026-4937 (CVSS 5.3) — IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2…
    CVE-2026-16707 (CVSS 8.2) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-17028 (CVSS 6.5) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-17091 (CVSS 8.4) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-17097 (CVSS 7.3) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-18821 (CVSS 7.5) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-16724 (CVSS 4.5) — IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.0…
    CVE-2026-18871 (CVSS 7.3) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by …
    CVE-2026-17414 (CVSS 8.1) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High