Denial of Service Vulnerability in IBM Power Systems Firmware
CVE-2026-17426

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Openbmc
Vendor
CVE Published:
8 November 2026

What is CVE-2026-17426?

A vulnerability in IBM Power Systems Firmware allows remote attackers to exploit an unhandled exception, potentially resulting in a denial of service. This affects various versions of FW1060.x, making it imperative for users to review relevant patches and updates to mitigate risks.

Affected Version(s)

OPENBMC FW1060.00

References

https://www.ibm.com/support/pages/node/7291689
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.