CVE-2026-17100

Analyzed Analyzed - Analysis Complete

IBM Power Systems Firmware Code Execution Vulnerability

Publication date: 2026-08-19

Last updated on: 2026-08-25

Assigner: IBM Corporation

Description

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the BMC/FSP can exploit this vulnerability, allowing arbitrary code to be executed in the host firmware runtime, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact to the managed system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-25

Generated

2026-11-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-11-07

NVD

CVE-2026-17100

EUVD

EUVD-2026-62629

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	power_system_s1122_(9824-22a)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_s1122_(9824-22a)_firmware	fw1120.00
ibm	power_system_s1124_(9824-42a)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_s1124_(9824-42a)_firmware	fw1120.00
ibm	power_system_s1122s_(9824-22b)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_s1122s_(9824-22b)_firmware	fw1120.00
ibm	power_system_s1114_(9824-41b)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_s1114_(9824-41b)_firmware	fw1120.00
ibm	power_system_l1122_(9856-22h)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_l1122_(9856-22h)_firmware	fw1120.00
ibm	power_system_l1124_(9856-42h)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_l1124_(9856-42h)_firmware	fw1120.00
ibm	power_system_e1150_(9043-mru)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_e1150_(9043-mru)_firmware	fw1120.00
ibm	power_system_s1112_(9242-21b)_firmware	fw1120.00
ibm	power_system_s1112_(9242-21t)_firmware	fw1120.00
ibm	power_system_e1080_(9080-hex)_firmware	From fw1060.00 (inc) to fw1060.81 (exc)
ibm	power_system_s1022_(9105-22a)_firmware	From fw1060.00 (inc) to fw1060.81 (exc)
ibm	power_system_s1024_(9105-42a)_firmware	From fw1060.00 (inc) to fw1060.81 (exc)
ibm	power_system_s1022s_(9105-22b)_firmware	From fw1060.00 (inc) to fw1060.81 (exc)
ibm	power_system_s1014_(9105-41b)_firmware	From fw1060.00 (inc) to fw1060.81 (exc)
ibm	power_system_l1022_(9786-22h)_firmware	From fw1060.00 (inc) to fw1060.81 (exc)
ibm	power_system_l1024_(9786-42h)_firmware	From fw1060.00 (inc) to fw1060.81 (exc)
ibm	power_system_e1050_(9043-mrx)_firmware	From fw1060.00 (inc) to fw1060.81 (exc)
ibm	power_system_s1012_(9028-21b)_firmware	From fw1060.00 (inc) to fw1060.81 (exc)
ibm	power_system_e1180_(9080-heu)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_e1180_(9080-heu)_firmware	fw1120.00
ibm	power_system_s922_(9009-22g)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_s922_(9009-22g)_firmware	fw950.h3
ibm	power_system_h922_(9223-22s)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_s914_(9009-41g)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_s924_(9009-42g)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_h924_(9223-42s)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_e950_(9040-mr9)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_e980_(9080-m9s)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_ac922_(8335-gth)_firmware	From op940 (inc) to op940.a2 (exc)
ibm	power_system_ac922_(8335-gtx)_firmware	From op940 (inc) to op940.a2 (exc)
ibm	power_hardware_management_console_(7063-cr2)_firmware	From op940 (inc) to op940.82 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

CVE-2026-17100 is a vulnerability in IBM Power Systems Firmware affecting the service processor mailbox interface. An attacker with authenticated service-level access to the BMC or FSP can exploit this flaw to execute arbitrary code in the host firmware runtime, gaining full control over the managed system.

Detection Guidance

Detection requires checking the firmware version of IBM Power Systems. Compare installed versions against affected releases listed in the CVE. Use BMC/FSP management tools or commands like 'systemctl status' or vendor-specific utilities to verify firmware versions.

Impact Analysis

This vulnerability allows an attacker to execute arbitrary code in the host firmware runtime, resulting in full control over the managed system. This leads to significant confidentiality, integrity, and availability impacts, meaning sensitive data could be accessed, altered, or destroyed, and the system could become unstable or unavailable.

Compliance Impact

This vulnerability could lead to breaches of confidentiality and integrity, which are critical for compliance with standards like GDPR and HIPAA. Unauthorized access or modification of data could result in violations, potential legal penalties, and reputational damage for organizations handling sensitive information.

Mitigation Strategies

Apply the latest firmware updates provided by IBM for your specific Power Systems model. Download updates from IBM Fix Central and install them via the BMC/FSP interface. Ensure no authenticated service-level access is granted to untrusted users.

Hi! I’m here to help you understand CVE-2026-17100. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...