CVE-2026-17063

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware version FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80

Description A missing authorization issue exists in the interface between the Baseboard Management Controller (BMC) or Field Programmable System Extension (FSP) and the host system. An attacker with root or service account access to the BMC/FSP can access and disrupt the host processor state. This can impact the managed system and all hosted partitions, leading to a loss of confidentiality and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.