CVE-2026-18849

IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impac...

CVE-2026-14514

IBM Reliable Scalable Cluster Technology RSCT 3.0 could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation...

CVE-2026-14514 Reliable Scalable Cluster Technology Denial-of-Service

IBM Reliable Scalable Cluster Technology RSCT 3.0 could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation...

EUVD-2026-63096

IBM Reliable Scalable Cluster Technology RSCT 3.0 could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation...

CVE-2026-17015 IBM i Denial of Service

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...

EUVD-2026-62854

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...

CVE-2026-17015 IBM i Denial of Service

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...

CVE-2026-17015

IBM i versions 7.3 through 7.6 are affected by an out-of-bounds read (CWE-125) in the 5770-SS1 feature, allowing a remote authenticated attacker to cause a denial of service and obtain sensitive information. IBM rates the vulnerability CVSS 5.4 (MEDIUM) while the NVD assigns 8.1 (HIGH) , reflecti...

CVE-2026-18102 IBM i Buffer Overflow

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...

CVE-2026-18102 IBM i Buffer Overflow

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...

EUVD-2026-62853

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...

CVE-2026-18102

IBM i versions 7.3 through 7.6 (feature 5770-999) contain a heap-based buffer overflow (CWE-122) caused by an integer underflow during bounds checking . A remote authenticated attacker can exploit this to overwrite adjacent memory, resulting in a partial integrity impact. NVD rates it 4.3 MEDIUM ...

CVE-2026-18544 Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

EUVD-2026-62851

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

EUVD-2026-62849

IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impac...

CVE-2026-18849 IBM OpenBMC Code Execution

IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impac...

CVE-2026-18849

IBM OpenBMC firmware (FW1060.00–FW1060.80) on Power 10 systems is vulnerable to arbitrary code execution via the BMC firmware update process. The root cause is CWE-22 (Path Traversal) . An attacker with authenticated administrator-level access to the BMC over an adjacent network can exploit this ...

CVE-2026-18871

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causin...

CVE-2026-17414

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition...

CVE-2026-17042

IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM...