SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-17429

HIGH · CVSS 8.1 EPSS 0.10%

Source: NVD + CISA KEV + EPSS · Published 2026-08-19 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

IBM Power Systems Firmware versions FW1120.00, FW1110.00 to FW1110.30, FW1060.00 to FW1060.80, FW950.00 to FW950.H2, and OP940.00 to OP940.81 are vulnerable due to a flaw in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can manipulate hardware control registers, leading to complete control over the host system and its partitions, compromising confidentiality, integrity, and availability. Organizations using these firmware versions should prioritize remediation to mitigate the risk of unauthorized access and potential system compromise.

CVE
CVE-2026-17429
Severity
HIGH
CVSS
8.1
EPSS
0.10%

Original NVD Description

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can write arbitrary data to hardware control registers, allowing full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

Related CVEs

Other vulnerabilities affecting the same vendor(s)