IBM Power Systems Firmware CVE-2026-17414 Vulnerability Advisory

Vulnerability Overview CVE ID: CVE-2026-17414 Description: Power Systems Firmware is affected by a vulnerability in the partition firmware. An attacker can prevent a partition from completing its boot sequence by initiating a network boot. If OS Secure Boot is not enabled (default configuration), the attacker can also replace the boot image, thereby compromising all subsequently loaded content. Impact: Only partitions that actively perform network boot are affected, resulting in impacts to confidentiality, integrity, and availability. Affected Products Affected Products: - PowerVM Hypervisor (FW1120.00, FW1110.00 - FW1110.30, FW1060.00 - FW1060.80, FW950.00 - FW950.H2) - IBM Power System E180 (9080-HEU) - IBM Power System S1122 (9824-22A), S1124 (9824-42A), S1122s (9824-22B), S1114 (9824-41B), L1122 (9856-22H), L1124 (9856-42H), E1150 (9043-MRU) - IBM Power System S1112 (9242-21B, 9242-21T) - IBM Power System E1080 (9080-HEX) - IBM Power System S1022 (9105-22A), S1024 (9105-42A), S1022s (9105-22B), S1014 (9105-41B), L1022 (9786-22H), L1024 (9786-42H), E1050 (9043-MRX), S1012 (9028-21B) - IBM Power System S922 (9009-22G), H922 (9223-22S), S914 (9009-41G), S924 (9009-42G), H924 (9223-42S), E950 (9040-MR9), E980 (9080-M9S) Remediation Power 11: - Install FW1110.31(1110_134), FW1120.01(1120_167), or later. - Install FW1110.31(1110_155), FW1120.01(1120_190), or later. - Install FW1120.01(1120_190), or later. Power 10: - Install FW1060.81(1060_184), or later. - Install FW1060.81(1060_191), or later. Power 9: - Install FW950.H3(950_230), or later. Additional Information CVSS Score: 8.1 CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) References: Complete CVSS v3 Guide, On-line Calculator v3 Disclaimer In accordance with the definition by the FIRST organization, the CVSS score is provided "as is." IBM makes no representations or warranties regarding its applicability for any specific purpose. Users must assess the impact of the vulnerability on their own. Update Date Initial Publication Date: August 15, 2026 Notes The affected products and versions include only those supported and maintained by IBM. Unsupported or extended support products and versions not mentioned are outside the scope of this security advisory.

Goal Reached Thanks to every supporter — we hit 100%!

IBM Power Systems Firmware CVE-2026-17414 Vulnerability Advisory

More from this source