CVE-2026-17494
HighCVSS 8.2Summary
IBM Power Systems Firmware is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code execution on the host system, giving full control over the host and all hosted partitions.
Risk Assessment
Full compromise of the host system and all partitions, leading to confidentiality, integrity, and availability impact.
Recommendation
Apply available IBM Power Systems firmware updates and restrict service access to the BMC to trusted personnel only.
Original NVD description (English source)
IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.