CVE-2026-17494

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware version FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30

Description A flaw exists in the interface between the Baseboard Management Controller (BMC)—a specialized processor used for remote management of the server—and the host system. An attacker with service access to the BMC can send a specially crafted command to execute arbitrary code on the host system. This allows full control over the host and all hosted partitions, impacting confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.