CVE-2026-17093

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level access to the BMC/FSP can supply specially crafted configuration data, compromising the host firmware boot stage and everything subsequently loaded by it, resulting in a confidentiality, integrity, and availability impact to the managed system.
References
Link Resource
https://www.ibm.com/support/pages/node/7283239 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:fw1120.00:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1122_\(9824-22a\):-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:fw1120.00:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1124_\(9824-42a\):-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:fw1120.00:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1122s_\(9824-22b\):-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:fw1120.00:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1114_\(9824-41b\):-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
OR cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:fw1120.00:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1122_\(9856-22h\):-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
OR cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:fw1120.00:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1124_\(9856-42h\):-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
OR cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:fw1120.00:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e1150_\(9043-mru\):-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:ibm:power_system_s1112_\(9242-21b\)_firmware:fw1120.00:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1112_\(9242-21b\):-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:ibm:power_system_s1112_\(9242-21t\)_firmware:fw1120.00:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1112_\(9242-21t\):-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:ibm:power_system_e1080_\(9080-hex\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e1080_\(9080-hex\):-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:ibm:power_system_s1022_\(9105-22a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1022_\(9105-22a\):-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:ibm:power_system_s1024_\(9105-42a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1024_\(9105-42a\):-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:ibm:power_system_s1022s_\(9105-22b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1022s_\(9105-22b\):-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:ibm:power_system_s1014_\(9105-41b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1014_\(9105-41b\):-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:ibm:power_system_l1022_\(9786-22h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1022_\(9786-22h\):-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:ibm:power_system_l1024_\(9786-42h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1024_\(9786-42h\):-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:ibm:power_system_e1050_\(9043-mrx\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e1050_\(9043-mrx\):-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:ibm:power_system_s1012_\(9028-21b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1012_\(9028-21b\):-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
OR cpe:2.3:o:ibm:power_system_e1180_\(9080-heu\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_e1180_\(9080-heu\)_firmware:fw1120.00:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e1180_\(9080-heu\):-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
OR cpe:2.3:o:ibm:power_system_s922_\(9009-22g\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s922_\(9009-22g\)_firmware:fw950.h3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s922_\(9009-22g\):-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:ibm:power_system_h922_\(9223-22s\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h922_\(9223-22s\):-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:ibm:power_system_s914_\(9009-41g\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s914_\(9009-41g\):-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:ibm:power_system_s924_\(9009-42g\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s924_\(9009-42g\):-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:ibm:power_system_h924_\(9223-42s\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h924_\(9223-42s\):-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:ibm:power_system_e950_\(9040-mr9\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e950_\(9040-mr9\):-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:ibm:power_system_e980_\(9080-m9s\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e980_\(9080-m9s\):-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:ibm:power_system_ac922_\(8335-gth\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_ac922_\(8335-gth\):-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:ibm:power_system_ac922_\(8335-gtx\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_ac922_\(8335-gtx\):-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:ibm:power_hardware_management_console_\(7063-cr2\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_hardware_management_console_\(7063-cr2\):-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-08-19 19:17

Updated : 2026-08-25 20:29


NVD link : CVE-2026-17093

Mitre link : CVE-2026-17093

CVE.ORG link : CVE-2026-17093


JSON object : View

Products Affected

ibm

  • power_system_s1024_\(9105-42a\)
  • power_system_s1024_\(9105-42a\)_firmware
  • power_system_s1112_\(9242-21b\)
  • power_system_s1114_\(9824-41b\)_firmware
  • power_system_s1014_\(9105-41b\)
  • power_system_e1150_\(9043-mru\)_firmware
  • power_hardware_management_console_\(7063-cr2\)_firmware
  • power_system_e950_\(9040-mr9\)
  • power_system_s1112_\(9242-21t\)
  • power_system_l1124_\(9856-42h\)
  • power_system_s1014_\(9105-41b\)_firmware
  • power_system_s1122_\(9824-22a\)_firmware
  • power_system_l1024_\(9786-42h\)
  • power_system_ac922_\(8335-gth\)_firmware
  • power_system_l1122_\(9856-22h\)_firmware
  • power_system_l1122_\(9856-22h\)
  • power_system_e980_\(9080-m9s\)
  • power_system_s922_\(9009-22g\)_firmware
  • power_system_s1012_\(9028-21b\)
  • power_system_s1112_\(9242-21b\)_firmware
  • power_system_s1022_\(9105-22a\)_firmware
  • power_system_ac922_\(8335-gtx\)_firmware
  • power_system_e1180_\(9080-heu\)
  • power_system_e1050_\(9043-mrx\)
  • power_system_s1122_\(9824-22a\)
  • power_system_s924_\(9009-42g\)
  • power_system_l1124_\(9856-42h\)_firmware
  • power_system_s924_\(9009-42g\)_firmware
  • power_system_s914_\(9009-41g\)
  • power_system_s914_\(9009-41g\)_firmware
  • power_system_h924_\(9223-42s\)_firmware
  • power_system_s922_\(9009-22g\)
  • power_system_s1124_\(9824-42a\)_firmware
  • power_system_ac922_\(8335-gth\)
  • power_system_s1022_\(9105-22a\)
  • power_system_l1022_\(9786-22h\)
  • power_system_s1112_\(9242-21t\)_firmware
  • power_system_e1180_\(9080-heu\)_firmware
  • power_system_s1022s_\(9105-22b\)_firmware
  • power_system_l1024_\(9786-42h\)_firmware
  • power_system_s1122s_\(9824-22b\)
  • power_system_e950_\(9040-mr9\)_firmware
  • power_system_e980_\(9080-m9s\)_firmware
  • power_system_e1080_\(9080-hex\)
  • power_system_h922_\(9223-22s\)_firmware
  • power_system_e1050_\(9043-mrx\)_firmware
  • power_system_ac922_\(8335-gtx\)
  • power_system_s1122s_\(9824-22b\)_firmware
  • power_system_s1022s_\(9105-22b\)
  • power_hardware_management_console_\(7063-cr2\)
  • power_system_s1012_\(9028-21b\)_firmware
  • power_system_s1114_\(9824-41b\)
  • power_system_s1124_\(9824-42a\)
  • power_system_h924_\(9223-42s\)
  • power_system_l1022_\(9786-22h\)_firmware
  • power_system_e1150_\(9043-mru\)
  • power_system_e1080_\(9080-hex\)_firmware
  • power_system_h922_\(9223-22s\)
CWE
CWE-121

Stack-based Buffer Overflow