CVE-2026-17028
mediumpriority · track · 0EPSS 0.003 · 20 %ileUSEPSS · scored 2026-10-27
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition undergoing iSCSI SAN network boot can prevent that partition from completing its boot sequence. Other partitions and the managed system are not affected. Only partitions actively performing an iSCSI SAN network boot are affected, resulting in an availability impact.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (34)
Products and version ranges known to be affected.
- ibm power system e1050 (9043-mrx) firmwarefw1060.00 → fw1060.81nvdUScpe:2.3:o:ibm:power_system_e1050_\(9043-mrx\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1080 (9080-hex) firmwarefw1060.00 → fw1060.81nvdUScpe:2.3:o:ibm:power_system_e1080_\(9080-hex\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1150 (9043-mru) firmwarefw1110.00 → fw1110.31nvdUScpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1150 (9043-mru) firmware= fw1120.00nvdUScpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1180 (9080-heu) firmwarefw1110.00 → fw1110.31nvdUScpe:2.3:o:ibm:power_system_e1180_\(9080-heu\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1180 (9080-heu) firmware= fw1120.00nvdUScpe:2.3:o:ibm:power_system_e1180_\(9080-heu\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e950 (9040-mr9) firmwarefw950.00 → fw950.h3nvdUScpe:2.3:o:ibm:power_system_e950_\(9040-mr9\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e980 (9080-m9s) firmwarefw950.00 → fw950.h3nvdUScpe:2.3:o:ibm:power_system_e980_\(9080-m9s\)_firmware:*:*:*:*:*:*:*:*
- ibm power system h922 (9223-22s) firmwarefw950.00 → fw950.h3nvdUScpe:2.3:o:ibm:power_system_h922_\(9223-22s\)_firmware:*:*:*:*:*:*:*:*
- ibm power system h924 (9223-42s) firmwarefw950.00 → fw950.h3nvdUScpe:2.3:o:ibm:power_system_h924_\(9223-42s\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1022 (9786-22h) firmwarefw1060.00 → fw1060.81nvdUScpe:2.3:o:ibm:power_system_l1022_\(9786-22h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1024 (9786-42h) firmwarefw1060.00 → fw1060.81nvdUScpe:2.3:o:ibm:power_system_l1024_\(9786-42h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1122 (9856-22h) firmwarefw1110.00 → fw1110.31nvdUScpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1122 (9856-22h) firmware= fw1120.00nvdUScpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1124 (9856-42h) firmwarefw1110.00 → fw1110.31nvdUScpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1124 (9856-42h) firmware= fw1120.00nvdUScpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system s1012 (9028-21b) firmwarefw1060.00 → fw1060.81nvdUScpe:2.3:o:ibm:power_system_s1012_\(9028-21b\)_firmware:*:*:*:*:*:*:*:*
- ibm power system s1014 (9105-41b) firmwarefw1060.00 → fw1060.81nvdUScpe:2.3:o:ibm:power_system_s1014_\(9105-41b\)_firmware:*:*:*:*:*:*:*:*
- ibm power system s1022 (9105-22a) firmwarefw1060.00 → fw1060.81nvdUScpe:2.3:o:ibm:power_system_s1022_\(9105-22a\)_firmware:*:*:*:*:*:*:*:*
- ibm power system s1022s (9105-22b) firmwarefw1060.00 → fw1060.81nvdUScpe:2.3:o:ibm:power_system_s1022s_\(9105-22b\)_firmware:*:*:*:*:*:*:*:*
sources
Which sources assert this record, and when.
references (1) nvd
External citations — patches, advisories, analysis.
- https://www.ibm.com/support/pages/node/7283233Vendor Advisory
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan