CVE-2026-17093

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2 IBM Power Systems Firmware versions OP940.00 through OP940.a1 (Power9) IBM Power Systems Firmware versions OP940.00 through OP940.81 (Power HMC)

Description An issue exists in the host firmware configuration parsing. An attacker with service-level access to the BMC (Baseboard Management Controller) or FSP (First Service Processor) can provide specially crafted configuration data. This action compromises the host firmware boot stage and all subsequent components loaded by it, impacting the confidentiality, integrity, and availability of the managed system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.