CVE-2023-28343

CVE-2023-28343 Altenergy Power System Control Software settimezone RCE脆弱性 CVE-2023-28343 中国語名: Altenergy Power System Control Software settimezone リモートコマンド実行の脆弱性（CVE-2023-28343） CVSS スコア:9.0 説明 : Altenergy Power System Control Softwareは、Altenergy Power System製のマイクロインバータ制御ソフトウェアです。 影響 : Altenergy...

Security Bulletin: This Power System update is being released to address CVE-2026-43198

Summary An IPv6 listening socket handing an IPv4-mapped IPv6 connection request results in race condition which may result in loss of integrity, confidentiality, and availability. Vulnerability Details CVEID:CVE-2026-43198 DESCRIPTION: In the Linux kernel, the following vulnerability has been...

Security Bulletin: This Power System update is being released to address CVE-2026-93306

Summary Power Systems Firmware is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can send a malformed HTTPS request to ASMI, causing the web server to crash with possible memory corruption and generate an error log. The ASMI web...

Security Bulletin: This Power System update is being released to address CVE-2026-52943, CVE-2026-43373, and CVE-2026-43194

Summary An unauthenticated attacker on the BMC's local network can cause loss of service. Vulnerability Details CVEID:CVE-2026-52943 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskbcarve helpers...

Data-Optimized Contingency Screening: A Machine Learning Approach to Power System Security

Ensuring the security of the power system is essential for stability and reliability, especially in the event of disruption. Effective classification of contingency in power systems enables proactive decision-making and mitigates large-scale breakdowns and failures. This study explores the use of...

CVE-2026-49003

Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameter...

EUVD-2026-68455

Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameter...

CVE-2026-49003 Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V5.0 Product

Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameter...

CVE-2026-49003: Improper Authentication

Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameter...

PT-2026-83771

Name of the Vulnerable Software and Affected Versions ZTE ZXDU68 S202 affected versions not specified Description Command injection flaws allow attackers to delete core system runtime files, which leads to the crash and paralysis of the monitoring module. Additionally, attackers can obtain root...

CVE-2026-55673 PowSyBl: Command Injection in LocalCommandExecutor-s

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate command arguments and environment variables into strings interpreted through bash -c or cmd /c without sufficient escaping...

CVE-2026-16938 Power System Missing Authorization

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in access controls over privileged system configuration operations on the FSP. An attacker with authenticated administrator-level access to...

CVE-2026-11885 Power System update in Buffer Copy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...

CVE-2026-11885

CVE-2026-11885 affects IBM PowerVM Hypervisor. A crafted OS hypervisor call can crash the hypervisor or compromise OS memory integrity. Affected firmware: FW1110.00–FW1110.20, FW1060.00–FW1060.71, and FW950.00–FW950.H1. Root cause cited as CWE-120 (Buffer Copy without Checking Size of Input). Rem...

CVE-2026-11885 Power System update in Buffer Copy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...

CVE-2026-4932 This Power System update is being released to address Insufficient Entropy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption TME hardware to decrypt encrypted memory due to insufficient cryptographic entropy...

CVE-2026-4932

IBM PowerVM Hypervisor vulnerability CVE-2026-4932 affects FW1110.00–FW1110.20 and FW1060.00–FW1060.71. Affects PowerVM Hypervisor and TME hardware; attacker with physical access to Transparent Memory Encryption could decrypt memory due to insufficient cryptographic entropy. Impact is high confid...

CVE-2026-7868 This Power System update is being released to address incorrect authorization

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges...

Security Bulletin: This Power System update is being released to address CVE-2026-7868

Summary This impacts the BMC's HTTPS interface for BMC ReadOnly user accounts. Vulnerability Details CVEID:CVE-2026-7868 DESCRIPTION: OPENBMC allows ReadOnly users to escalate privileges and give themselves administrator privileges. CWE:CWE-863: Incorrect Authorization CVSS Source: IBM CVSS Base...

Security Bulletin: This Power System update is being released to address CVE-2026-8058

Summary The BMC's diagnostic interface is affected. Vulnerability Details CVEID:CVE-2026-8058 DESCRIPTION: OPENBMC allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it. CWE:CWE-200: Exposure of Sensitive...