Denial of Service Vulnerability in IBM Power Systems Firmware
CVE-2026-17427

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Openbmc
Power Hardware Management Console
Vendor
CVE Published:
8 November 2026

What is CVE-2026-17427?

A vulnerability in the IBM Power Systems Firmware can allow a remote attacker to exploit improper input length validation, potentially leading to a denial of service condition. This flaw affects several versions of the firmware and could disrupt normal operations by rendering the system unresponsive.

Affected Version(s)

OPENBMC FW1060.00

OPENBMC OP940.00

OPENBMC OP910.00

References

https://www.ibm.com/support/pages/node/7294278
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.