CVE-2026-18871CWE-121

CVE-2026-18871

High · published August 20, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory corruption during system initialisation, resulting in an integrity and availability impact to the managed system.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00140 · 3.1th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-08-20T00:17Z
Affected products (27)
ProductVersionsFixed in
ibm/power_system_s1122_\(9824-22a\)_firmware≥ fw1110.00, < fw1110.31fw1110.31
ibm/power_system_s1122_\(9824-22a\)_firmwareall versions—
ibm/power_system_s1124_\(9824-42a\)_firmware≥ fw1110.00, < fw1110.31fw1110.31
ibm/power_system_s1124_\(9824-42a\)_firmwareall versions—
ibm/power_system_s1122s_\(9824-22b\)_firmware≥ fw1110.00, < fw1110.31fw1110.31
ibm/power_system_s1122s_\(9824-22b\)_firmwareall versions—
ibm/power_system_s1114_\(9824-41b\)_firmware≥ fw1110.00, < fw1110.31fw1110.31
ibm/power_system_s1114_\(9824-41b\)_firmwareall versions—
ibm/power_system_l1122_\(9856-22h\)_firmware≥ fw1110.00, < fw1110.31fw1110.31
ibm/power_system_l1122_\(9856-22h\)_firmwareall versions—
ibm/power_system_l1124_\(9856-42h\)_firmware≥ fw1110.00, < fw1110.31fw1110.31
ibm/power_system_l1124_\(9856-42h\)_firmwareall versions—
ibm/power_system_e1150_\(9043-mru\)_firmware≥ fw1110.00, < fw1110.31fw1110.31
ibm/power_system_e1150_\(9043-mru\)_firmwareall versions—
ibm/power_system_s1112_\(9242-21b\)_firmwareall versions—
ibm/power_system_s1112_\(9242-21t\)_firmwareall versions—
ibm/power_system_e1080_\(9080-hex\)_firmware≥ fw1060.00, < fw1060.81fw1060.81
ibm/power_system_s1022_\(9105-22a\)_firmware≥ fw1060.00, < fw1060.81fw1060.81
ibm/power_system_s1024_\(9105-42a\)_firmware≥ fw1060.00, < fw1060.81fw1060.81
ibm/power_system_s1022s_\(9105-22b\)_firmware≥ fw1060.00, < fw1060.81fw1060.81
ibm/power_system_s1014_\(9105-41b\)_firmware≥ fw1060.00, < fw1060.81fw1060.81
ibm/power_system_l1022_\(9786-22h\)_firmware≥ fw1060.00, < fw1060.81fw1060.81
ibm/power_system_l1024_\(9786-42h\)_firmware≥ fw1060.00, < fw1060.81fw1060.81
ibm/power_system_e1050_\(9043-mrx\)_firmware≥ fw1060.00, < fw1060.81fw1060.81
ibm/power_system_s1012_\(9028-21b\)_firmware≥ fw1060.00, < fw1060.81fw1060.81
ibm/power_system_e1180_\(9080-heu\)_firmware≥ fw1110.00, < fw1110.31fw1110.31
ibm/power_system_e1180_\(9080-heu\)_firmwareall versions—
References (1)
EPSS history
Timeline
  • 19 AUG 19:36Z
    Power System Buffer Overflow
    cvelistv5