Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2026-4936 Details
Description
IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could exploit this weakness to derive the encryption key and access the data.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 20, 2026Exploitation: NoneAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.ibm.com/support/pages/node/7283890 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-331 | Insufficient Entropy | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ibm power system s1122 (9824-22a) firmware | >= fw1110.00, < fw1110.30 fw1120.00 |
CPE
Remediation
| |
| ibm power system s1122 (9824-22a) | All versions |
CPE
Remediation
| |
| ibm power system s1124 (9824-42a) firmware | >= fw1110.00, < fw1110.30 fw1120.00 |
CPE
Remediation
| |
| ibm power system s1124 (9824-42a) | All versions |
CPE
Remediation
| |
| ibm power system s1122s (9824-22b) firmware | >= fw1110.00, < fw1110.30 fw1120.00 |
CPE
Remediation
| |
| ibm power system s1122s (9824-22b) | All versions |
CPE
Remediation
| |
| ibm power system s1114 (9824-41b) firmware | >= fw1110.00, < fw1110.30 fw1120.00 |
CPE
Remediation
| |
| ibm power system s1114 (9824-41b) | All versions |
CPE
Remediation
| |
| ibm power system l1122 (9856-22h) firmware | >= fw1110.00, < fw1110.30 fw1120.00 |
CPE
Remediation
| |
| ibm power system l1122 (9856-22h) | All versions |
CPE
Remediation
| |
| ibm power system l1124 (9856-42h) firmware | >= fw1110.00, < fw1110.30 fw1120.00 |
CPE
Remediation
| |
| ibm power system l1124 (9856-42h) | All versions |
CPE
Remediation
| |
| ibm power system e1150 (9043-mru) firmware | >= fw1110.00, < fw1110.30 fw1120.00 |
CPE
Remediation
| |
| ibm power system e1150 (9043-mru) | All versions |
CPE
Remediation
| |
| ibm power system s1112 (9242-21b) firmware | fw1120.00 |
CPE
Remediation
| |
| ibm power system s1112 (9242-21b) | All versions |
CPE
Remediation
| |
| ibm power system s1112 (9242-21t) firmware | fw1120.00 |
CPE
Remediation
| |
| ibm power system s1112 (9242-21t) | All versions |
CPE
Remediation
| |
| ibm power system e1080 (9080-hex) firmware | >= fw1060.00, < fw1060.72 |
CPE
Remediation
| |
| ibm power system e1080 (9080-hex) | All versions |
CPE
Remediation
| |
| ibm power system s1022 (9105-22a) firmware | >= fw1060.00, < fw1060.72 |
CPE
Remediation
| |
| ibm power system s1022 (9105-22a) | All versions |
CPE
Remediation
| |
| ibm power system s1024 (9105-42a) firmware | >= fw1060.00, < fw1060.72 |
CPE
Remediation
| |
| ibm power system s1024 (9105-42a) | All versions |
CPE
Remediation
| |
| ibm power system s1022s (9105-22b) firmware | >= fw1060.00, < fw1060.72 |
CPE
Remediation
| |
| ibm power system s1022s (9105-22b) | All versions |
CPE
Remediation
| |
| ibm power system s1014 (9105-41b) firmware | >= fw1060.00, < fw1060.72 |
CPE
Remediation
| |
| ibm power system s1014 (9105-41b) | All versions |
CPE
Remediation
| |
| ibm power system l1022 (9786-22h) firmware | >= fw1060.00, < fw1060.72 |
CPE
Remediation
| |
| ibm power system l1022 (9786-22h) | All versions |
CPE
Remediation
| |
| ibm power system l1024 (9786-42h) firmware | >= fw1060.00, < fw1060.72 |
CPE
Remediation
| |
| ibm power system l1024 (9786-42h) | All versions |
CPE
Remediation
| |
| ibm power system e1050 (9043-mrx) firmware | >= fw1060.00, < fw1060.72 |
CPE
Remediation
| |
| ibm power system e1050 (9043-mrx) | All versions |
CPE
Remediation
| |
| ibm power system s1012 (9028-21b) firmware | >= fw1060.00, < fw1060.72 |
CPE
Remediation
| |
| ibm power system s1012 (9028-21b) | All versions |
CPE
Remediation
| |
| ibm power system e1180 (9080-heu) firmware | >= fw1110.00, < fw1110.30 fw1120.00 |
CPE
Remediation
| |
| ibm power system e1180 (9080-heu) | All versions |
CPE
Remediation
| |
| ibm power system s922 (9009-22g) firmware | >= fw950.00, < fw950.h3 |
CPE
Remediation
| |
| ibm power system s922 (9009-22g) | All versions |
CPE
Remediation
| |
| ibm power system h922 (9223-22s) firmware | >= fw950.00, < fw950.h3 |
CPE
Remediation
| |
| ibm power system h922 (9223-22s) | All versions |
CPE
Remediation
| |
| ibm power system s914 (9009-41g) firmware | >= fw950.00, < fw950.h3 |
CPE
Remediation
| |
| ibm power system s914 (9009-41g) | All versions |
CPE
Remediation
| |
| ibm power system s924 (9009-42g) firmware | >= fw950.00, < fw950.h3 |
CPE
Remediation
| |
| ibm power system s924 (9009-42g) | All versions |
CPE
Remediation
| |
| ibm power system h924 (9223-42s) firmware | >= fw950.00, < fw950.h3 |
CPE
Remediation
| |
| ibm power system h924 (9223-42s) | All versions |
CPE
Remediation
| |
| ibm power system e950 (9040-mr9) firmware | >= fw950.00, < fw950.h3 |
CPE
Remediation
| |
| ibm power system e950 (9040-mr9) | All versions |
CPE
Remediation
| |
| ibm power system e980 (9080-m9s) firmware | >= fw950.00, < fw950.h3 |
CPE
Remediation
| |
| ibm power system e980 (9080-m9s) | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 25, 2026 | Initial Analysis | [email protected] |
| Aug 20, 2026 | CVE Modified | CISA-ADP |
| Aug 19, 2026 | New CVE Received | [email protected] |