AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-17494

IBM Power Systems Firmware: stack buffer overflow

IBM

CVE-2026-17494 · Published Aug 19, 2026 · updated Aug 25, 2026

High8.2
No fix yet
IBM advisory

IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

Affected versions

PackageAffectedFixed in
Power Systems Firmware
Product
<= FW1120.00No fix yet
>= FW1110.00, <= FW1110.30No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-121

More IBM advisories

All IBM