Vulnerability in Power Systems Firmware Affects IBM Products

CVE-2026-19321

What is CVE-2026-19321?

IBM's Power Systems Firmware, including multiple versions, contains a vulnerability related to the host firmware that allows attackers with service access to the service processor to execute specially crafted commands. This could result in unauthorized access to sensitive hardware registers, potentially leading to limited confidentiality issues for the system. Users are highly encouraged to apply patches to mitigate the risks associated with this vulnerability. For more details, visit the vendor's advisory.

References