SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-19321

MEDIUM · CVSS 6.7 EPSS 0.11% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-19 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects specific versions of Power Systems Firmware, allowing an attacker with service access to the service processor to execute crafted commands that may expose sensitive hardware register contents. This could lead to limited confidentiality and availability impacts on the affected host systems. Organizations using these firmware versions should prioritize patching to mitigate potential risks associated with unauthorized access to sensitive information.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-19321
Severity
MEDIUM
CVSS
6.7
EPSS
0.11%

Original NVD Description

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers that should be inaccessible to the service processor. Successful exploitation could result in limited confidentiality or availability impacts to the affected host system.

Related CVEs

Other vulnerabilities affecting the same vendor(s)