CVE-2026-17100

Name of the Vulnerable Software and Affected Versions Power Systems Firmware version FW1120.00 Power Systems Firmware versions FW1110.00 through FW1110.30 Power Systems Firmware versions FW1060.00 through FW1060.80 Power Systems Firmware versions FW950.00 through FW950.H2 Power Systems Firmware versions OP940.00 through OP940.a1 Power Systems Firmware versions OP940.00 through OP940.81

Description A flaw exists in the service processor mailbox interface. An attacker with authenticated service-level access to the BMC/FSP can exploit this issue to execute arbitrary code within the host firmware runtime. This allows for full control over the managed system, impacting its confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.