Log in / Sign up

Vulnerability details

CVE-2026-17093

IBM Power Systems Firmware

Power System Buffer Overflow

CVSS 3.1
8.2High

Official description

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level access to the BMC/FSP can supply specially crafted configuration data, compromising the host firmware boot stage and everything subsequently loaded by it, resulting in a confidentiality, integrity, and availability impact to the managed system.

CVSS scores

ScoreVersionSourceVector
8.2High 3.1 CVEProject cvelistV5 (CNA) (ibm) CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
IBM Power Systems Firmware FW1120.00 CVEProject cvelistV5 (CNA)
IBM Power Systems Firmware FW1060.00 ≤ v ≤ FW1060.80 CVEProject cvelistV5 (CNA)
IBM Power Systems Firmware FW1110.00 ≤ v ≤ FW1110.30 CVEProject cvelistV5 (CNA)
IBM Power Systems Firmware FW950.00 ≤ v ≤ FW950.H2 CVEProject cvelistV5 (CNA)
IBM Power Systems Firmware OP940.00 ≤ v ≤ OP940.a1 CVEProject cvelistV5 (CNA)
IBM Power Systems Firmware OP940.00 ≤ v ≤ OP940.81 CVEProject cvelistV5 (CNA)

References and advisories

1
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-08-19
Last updated
2026-08-21
State
Published
Assigner (CNA)
ibm

Exploit prediction (EPSS)

0.16%
Probability of exploitation in 30 days
6.2%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • CWE-121
    Stack-based Buffer Overflow