Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-17100

Power System Out-of-bounds Write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the BMC/FSP can exploit this vulnerability, allowing arbitrary code to be executed in the host firmware runtime, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact to the managed system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Power Systems Firmware

  • FW1120.00affected
  • FW1110.00 to ≤ FW1110.30affected
  • FW1060.00 to ≤ FW1060.80affected
  • FW950.00 to ≤ FW950.H2affected
  • OP940.00 to ≤ OP940.a1affected
  • OP940.00 to ≤ OP940.81affected

References