CVE Catalog
CVE-2026-15961
MediumCVSS 5.2Summary
IBM PowerVM Hypervisor versions FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 contain a vulnerability due to improper control of format strings. A local attacker could exploit this to obtain sensitive information or cause a denial of service.
Risk Assessment
The risk includes potential disclosure of sensitive data and disruption of critical services in the PowerVM virtualization environment.
Recommendation
Apply the appropriate fixes provided by IBM for affected versions and restrict local access to the system.
Original NVD description (English source)
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings.