IBMCVE-2026-14971
IBM PowerVM Novalink 2.2.02.2.12.2.1.1
Low3.9CVE-2026-14971 · Published Jul 17, 2026 · updated Aug 11, 2026
IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| PowerVM Novalink Product | <= 2.2.02.2.12.2.1.1 | No fix yet |
| <= 2.3.02.3.0.12.3.12.3.2 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-16
More IBM advisories
All IBM| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jul 17 | IBM Langflow OSS: insecure direct object reference | High8.1 | No fix yet |
| Jul 17 | IBM Langflow OSS: hard-coded credentials | Critical9.8 | No fix yet |
| Jul 17 | IBM Langflow OSS: remote code execution | Critical9.8 | No fix yet |
| Jul 17 | IBM Langflow OSS: privilege escalation | Critical9.9 | No fix yet |
| Jul 17 | IBM Langflow OSS: improper input validation | Critical9.9 | No fix yet |
| Jul 17 | IBM Security Verify Access: information disclosure | Medium5.3 | No fix yet |