CVE-2026-17100 - Power System Out-of-bounds Write
Brief
CVE ID : CVE-2026-17100
Published : Aug. 19, 2026, 6:26 p. m.
- 42 minutes ago
Description : IBM Power Firmware FW1120. 00, FW1110. 00 through FW1110. 30, FW1060. 00 through FW1060. 80, FW950. 00 through FW950. H2, OP940. 00 through OP940. a1, and OP940. 00 - OP940. 81 is affected by a vulnerability in the service processor mailbox interface.
An attacker with authenticated service-level access to the BMC/FSP can exploit this vulnerability, allowing arbitrary code to be executed in the host firmware runtime, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact to the managed system.
Severity: 8.2
- HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...