CVE-2026-4937

IBM PowerVM Hypervisor (FW1110.00–FW1110.20, FW1060.00–FW1060.71, FW950.00–FW950.H2) is vulnerable to insufficient entropy (CWE-331) in certain hypervisor calls, allowing a local attacker with administrative privileges to decrypt encrypted data. The CVSS 3.1 score is 5.3 (Medium) with a local att...

Security Bulletin: This Power System update is being released to address CVE-2026-4937

Summary PowerVM could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested. Vulnerability Details CVEID:CVE-2026-4937 DESCRIPTION: PowerVM could allow a local attacker with administrative privileges t...