Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2026-17494 Details
Description
IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 21, 2026Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.ibm.com/support/pages/node/7283220 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ibm power system s1122 (9824-22a) firmware | >= fw1110.00, < fw1110.31 fw1120.00 |
CPE
Remediation
| |
| ibm power system s1122 (9824-22a) | All versions |
CPE
Remediation
| |
| ibm power system s1124 (9824-42a) firmware | >= fw1110.00, < fw1110.31 fw1120.00 |
CPE
Remediation
| |
| ibm power system s1124 (9824-42a) | All versions |
CPE
Remediation
| |
| ibm power system s1122s (9824-22b) firmware | >= fw1110.00, < fw1110.31 fw1120.00 |
CPE
Remediation
| |
| ibm power system s1122s (9824-22b) | All versions |
CPE
Remediation
| |
| ibm power system s1114 (9824-41b) firmware | >= fw1110.00, < fw1110.31 fw1120.00 |
CPE
Remediation
| |
| ibm power system s1114 (9824-41b) | All versions |
CPE
Remediation
| |
| ibm power system l1122 (9856-22h) firmware | >= fw1110.00, < fw1110.31 fw1120.00 |
CPE
Remediation
| |
| ibm power system l1122 (9856-22h) | All versions |
CPE
Remediation
| |
| ibm power system l1124 (9856-42h) firmware | >= fw1110.00, < fw1110.31 fw1120.00 |
CPE
Remediation
| |
| ibm power system l1124 (9856-42h) | All versions |
CPE
Remediation
| |
| ibm power system e1150 (9043-mru) firmware | >= fw1110.00, < fw1110.31 fw1120.00 |
CPE
Remediation
| |
| ibm power system e1150 (9043-mru) | All versions |
CPE
Remediation
| |
| ibm power system s1112 (9242-21b) firmware | fw1120.00 |
CPE
Remediation
| |
| ibm power system s1112 (9242-21b) | All versions |
CPE
Remediation
| |
| ibm power system s1112 (9242-21t) firmware | fw1120.00 |
CPE
Remediation
| |
| ibm power system s1112 (9242-21t) | All versions |
CPE
Remediation
| |
| ibm power system e1180 (9080-heu) firmware | >= fw1110.00, < fw1110.31 fw1120.00 |
CPE
Remediation
| |
| ibm power system e1180 (9080-heu) | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 25, 2026 | Initial Analysis | [email protected] |
| Aug 22, 2026 | CVE Modified | CISA-ADP |
| Aug 19, 2026 | CVE Modified | CISA-ADP |
| Aug 19, 2026 | New CVE Received | [email protected] |