CVE-2026-4936 Power System Insufficient Entropy

IBM PowerVM Hypervisor Platform KeyStore PKS and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could...

CVE-2026-4936

IBM PowerVM Hypervisor PKS and virtual TPM firmware (FW1110.00–.20, FW1060.00–.71, FW950.00–.H2) use weak persistent storage key seeds (CWE-331), allowing an attacker with service processor or HMC access to derive AES keys. Patch to FW1110.30, FW1060.72/80, or FW950.H3, then run sbmgr -regenerate...

EUVD-2026-62845

IBM PowerVM Hypervisor Platform KeyStore PKS and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could...

Security Bulletin: This Power System update is being released to address CVE-2026-4936

Summary PowerVM Platform KeyStore PKS and virtual TPM use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could exploit this weakness to derive the encryption key and access the data. Vulnerability Details...

EUVD-2023-29598

Malicious code in bioql PyPI...

CVE-2025-23337

NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller HMC that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service,...

CVE-2025-23337

The CVE-2025-23337 issue affects NVIDIA HGX & DGX GB200, GB300, B300, involving the HGX Management Controller (HMC). A malicious actor with administrative access on the BMC may access the HMC as an administrator, potentially enabling code execution, denial of service, privilege escalation, inform...

CVE-2024-41781 IBM PowerVM Hypervisor information disclosure

IBM PowerVM Platform KeyStore IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1030.00 through FW1030.60, FW1050.00 through FW1050.20, and FW1060.00 through FW1060.10 functionality can be compromised if an attacker gains service access to the HMC. An attacker that gains service access to the H...

PT-2024-29562 · Ibm · Ibm Powervm Hypervisor

Name of the Vulnerable Software and Affected Versions: IBM PowerVM Hypervisor versions FW950.00 through FW950.90 IBM PowerVM Hypervisor versions FW1030.00 through FW1030.60 IBM PowerVM Hypervisor versions FW1050.00 through FW1050.20 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.10...

CVE-2023-25683 IBM PowerVM Hypervisor information disclosure

IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592...

PT-2023-20242 · Ibm · Ibm Powervm Hypervisor

Name of the Vulnerable Software and Affected Versions: IBM PowerVM Hypervisor versions FW950.00 through FW950.71 IBM PowerVM Hypervisor versions FW1010.00 through FW1010.40 IBM PowerVM Hypervisor versions FW1020.00 through FW1020.20 IBM PowerVM Hypervisor versions FW1030.00 through FW1030.11...