CVE Feed

    Dashboard / CVE / CVE-2026-4932

    CVE-2026-4932

    IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardware to decrypt encrypted memory due to insufficient cryptographic entropy.

    Published:Jul 28, 2026
    Last Modified:Aug 26, 2026
    EPS:Jul 28, 2026
    EPSS Score:0.00081
    CVSS Score:4.2

    Affected Products

    Vendor
    Ibm
    Product
    Power System E1050 \(9043-mrx\)
    Vendor
    Ibm
    Product
    Power System E1050 \(9043-mrx\) Firmware
    Vendor
    Ibm
    Product
    Power System E1080 \(9080-hex\)
    Vendor
    Ibm
    Product
    Power System E1080 \(9080-hex\) Firmware
    Vendor
    Ibm
    Product
    Power System E1150 \(9043-mru\)
    Vendor
    Ibm
    Product
    Power System E1150 \(9043-mru\) Firmware
    Vendor
    Ibm
    Product
    Power System E1180 \(9080-heu\)
    Vendor
    Ibm
    Product
    Power System E1180 \(9080-heu\) Firmware
    Vendor
    Ibm
    Product
    Power System L1022 \(9786-22h\)
    Vendor
    Ibm
    Product
    Power System L1022 \(9786-22h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1024 \(9786-42h\)
    Vendor
    Ibm
    Product
    Power System L1024 \(9786-42h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1122 \(9856-22h\)
    Vendor
    Ibm
    Product
    Power System L1122 \(9856-22h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1124 \(9856-42h\)
    Vendor
    Ibm
    Product
    Power System L1124 \(9856-42h\) Firmware
    Vendor
    Ibm
    Product
    Power System S1012 \(9028-21b\)
    Vendor
    Ibm
    Product
    Power System S1012 \(9028-21b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1014 \(9105-41b\)
    Vendor
    Ibm
    Product
    Power System S1014 \(9105-41b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1022 \(9105-22a\)
    Vendor
    Ibm
    Product
    Power System S1022 \(9105-22a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1022s \(9105-22b\)
    Vendor
    Ibm
    Product
    Power System S1022s \(9105-22b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1024 \(9105-42a\)
    Vendor
    Ibm
    Product
    Power System S1024 \(9105-42a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1114 \(9824-41b\)
    Vendor
    Ibm
    Product
    Power System S1114 \(9824-41b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1122 \(9824-22a\)
    Vendor
    Ibm
    Product
    Power System S1122 \(9824-22a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1122s \(9824-22b\)
    Vendor
    Ibm
    Product
    Power System S1122s \(9824-22b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1124 \(9824-42a\)
    Vendor
    Ibm
    Product
    Power System S1124 \(9824-42a\) Firmware
    Vendor
    Ibm
    Product
    Powervm Hypervisor

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-331 Insufficient Entropy

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-59 Session Credential Falsification through Prediction

    Related CVEs

    CVE-2026-18849 (CVSS 6.8) — IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An …
    CVE-2026-4936 (CVSS 5.1) — IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through …
    CVE-2026-4937 (CVSS 5.3) — IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2…
    CVE-2026-16707 (CVSS 8.2) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-17028 (CVSS 6.5) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-17091 (CVSS 8.4) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-17097 (CVSS 7.3) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-18821 (CVSS 7.5) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-16724 (CVSS 4.5) — IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.0…
    CVE-2026-18871 (CVSS 7.3) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High