CVE-2026-17494

Analyzed Analyzed - Analysis Complete

IBM Power Systems Firmware Code Execution Vulnerability

Publication date: 2026-08-19

Last updated on: 2026-08-25

Assigner: IBM Corporation

Description

IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-25

Generated

2026-11-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-11-07

NVD

CVE-2026-17494

EUVD

EUVD-2026-62686

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	power_system_s1122_(9824-22a)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_s1122_(9824-22a)_firmware	fw1120.00
ibm	power_system_s1124_(9824-42a)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_s1124_(9824-42a)_firmware	fw1120.00
ibm	power_system_s1122s_(9824-22b)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_s1122s_(9824-22b)_firmware	fw1120.00
ibm	power_system_s1114_(9824-41b)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_s1114_(9824-41b)_firmware	fw1120.00
ibm	power_system_l1122_(9856-22h)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_l1122_(9856-22h)_firmware	fw1120.00
ibm	power_system_l1124_(9856-42h)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_l1124_(9856-42h)_firmware	fw1120.00
ibm	power_system_e1150_(9043-mru)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_e1150_(9043-mru)_firmware	fw1120.00
ibm	power_system_s1112_(9242-21b)_firmware	fw1120.00
ibm	power_system_s1112_(9242-21t)_firmware	fw1120.00
ibm	power_system_e1180_(9080-heu)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_e1180_(9080-heu)_firmware	fw1120.00

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability affects IBM Power Systems Firmware due to a flaw in the interface between the Baseboard Management Controller (BMC) and the host system. An attacker with service access to the BMC can send a specially crafted command, causing a stack-based buffer overflow that allows arbitrary code execution on the host system.

Detection Guidance

Detection requires checking the firmware version of IBM Power Systems. Use the BMC interface or host system commands to verify if the firmware is FW1120.00 or FW1110.00 through FW1110.30. Compare the version against the patched versions: FW1110.31(1110_134), FW1120.01(1120_167), or newer.

Impact Analysis

An attacker exploiting this vulnerability could gain full control over the host system and all hosted partitions. This results in a significant confidentiality, integrity, and availability impact, potentially allowing unauthorized access, data theft, system manipulation, or disruption of services.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, which may violate compliance requirements under GDPR, HIPAA, and other regulations. Organizations could face legal penalties, reputational damage, and loss of trust due to compromised data confidentiality and integrity.

Mitigation Strategies

Install the latest firmware updates immediately. For Power 11 systems, update to FW1110.31(1110_134) or FW1120.01(1120_167). For other models like E1180 or S1122, apply the specific updates provided by IBM. Ensure no workarounds are used as none are available.

Hi! I’m here to help you understand CVE-2026-17494. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...