PT-2026-97808

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions FW1120.00 through FW1120.01 IBM PowerVM Hypervisor versions FW1110.00 through FW1110.31 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.81 IBM PowerVM Hypervisor versions FW950.00 through FW950.H3...

CVE-2026-17413: Improper Validation of Array Index

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the RTAS firmware-to-OS interface. An attacker with administrator-level root access to a logical partition can send a...

CVE-2026-17511: Improper Removal of Sensitive Information Before Storage or Transfer

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service...

Security Bulletin: This Power System update is being released to address CVE-2026-19492

Summary Power Systems Firmware is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing sensitive data belonging to the hypervisor or other guest partitions hosted on the...

Security Bulletin: This Power System update is being released to address CVE-2026-17511

Summary Power Systems Firmware is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a...

Security Bulletin: This Power System update is being released to address CVE-2026-18870

Summary PowerVM Hypervisor could allow a remote attacker to obtain sensitive information due to an out-of-bounds read. Vulnerability Details CVEID:CVE-2026-18870 DESCRIPTION: PowerVM Hypervisor could allow a remote attacker to obtain sensitive information due to an out-of-bounds read. CWE:CWE-125...

Security Bulletin: This Power System update is being released to address CVE-2026-17503

Summary Power Systems Firmware is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter partition nvram, causing the partition to fail to boot. This condition persists until operator intervention —...

Security Bulletin: This Power System update is being released to address CVE-2026-17504

Summary Power Systems Firmware is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the partition firmware runtime, causing it to crash with possible memory corruption Vulnerability Details...

Security Bulletin: This Power System update is being released to address CVE-2026-17413

Summary Power Systems Firmware is affected by a vulnerability in the RTAS firmware-to-OS interface. An attacker with administrator-level root access to a logical partition can send a specially crafted request to partition firmware, causing the partition to crash and become unavailable. Other...

CVE-2026-18871

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causin...

CVE-2026-16707

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox...

CVE-2026-4936 Power System Insufficient Entropy

IBM PowerVM Hypervisor Platform KeyStore PKS and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could...

CVE-2026-4936 Power System Insufficient Entropy

IBM PowerVM Hypervisor Platform KeyStore PKS and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could...

CVE-2026-4937

IBM PowerVM Hypervisor (FW1110.00–FW1110.20, FW1060.00–FW1060.71, FW950.00–FW950.H2) is vulnerable to insufficient entropy (CWE-331) in certain hypervisor calls, allowing a local attacker with administrative privileges to decrypt encrypted data. The CVSS 3.1 score is 5.3 (Medium) with a local att...

CVE-2026-16707

IBM PowerVM Hypervisor firmware (FW1120.00, FW1110.00–FW1110.30, FW1060.00–FW1060.80, FW950.00–FW950.H2) is vulnerable to an out-of-bounds read (CWE-125) in the service processor mailbox interface . An attacker with authenticated service-level access to the FSP can send a crafted mailbox message ...

CVE-2026-16707 Power System Out-of-bounds Read

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox...

CVE-2026-17028

IBM PowerVM Hypervisor firmware (FW950.00–FW950.H2, FW1060.00–FW1060.80, FW1110.00–FW1110.30, FW1120.00) contains a CWE-125 out-of-bounds read in partition firmware during iSCSI SAN network boot. An unauthenticated attacker on the same network can halt a booting partition's availability (CVSS 6.5...

EUVD-2026-62866

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition undergoing iSCSI SAN netwo...

EUVD-2026-62868

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call to...

CVE-2026-17091 Power System Integer Overflow

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call to...