AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

IBMCVE-2026-19321

IBM Power Systems Firmware: integer overflow

IBM

CVE-2026-19321 · Published Aug 19, 2026 · updated Aug 25, 2026

Medium6.7
No fix yet
IBM advisory

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers that should be inaccessible to the service processor. Successful exploitation could result in limited confidentiality or availability impacts to the affected host system.

Affected versions

PackageAffectedFixed in
Power Systems Firmware
Product
<= FW1120.00No fix yet
>= FW1110.00, <= FW1110.30No fix yet
>= FW1060.00, <= FW1060.80No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-190

More IBM advisories

All IBM