CVE-2026-17504

Description

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the partition firmware runtime, causing it to crash with possible memory corruption.

Overview

State: PUBLISHED
Assigner (CNA): ibm
CVSS severity: MEDIUM
CVSS score: 5.1 / 10
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Effective score: 5.1 / 10 MEDIUM source: CNA overview
CWE(s): CWE-191
Reserved: 2026-07-26
Published: 2026-09-24 14:07 UTC
Last updated: 2026-09-24 14:31 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17504.json

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-85890
Assigner: ibm
Published: Sep 24, 2026, 2:07:42 PM
Updated: Sep 24, 2026, 2:31:41 PM
EUVD base score (CVSS 3.1): 5.1 / 10
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
EUVD-reported EPSS: 0.0000
Vendors: IBM
Products: PowerVM Hypervisor (FW1060.00 ≤FW1060.81)

PowerVM Hypervisor (FW1110.00 ≤FW1110.31)

PowerVM Hypervisor (FW1120.00 ≤FW1120.01)

PowerVM Hypervisor (FW950.00 ≤FW950.H3)
Aliases: GHSA-36hq-8wph-q8rm

ENISA description: IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the partition firmware runtime, causing it to crash with possible memory corruption.

EUVD references (1)

https://www.ibm.com/support/pages/node/7289130

Affected products (1)

Vendor	Product	Versions	Platforms
IBM	PowerVM Hypervisor	`FW1120.00` (affected), `FW1110.00` (affected), `FW1060.00` (affected), `FW950.00` (affected)	—

Vendor references (1)

References embedded in the original CVE record by the assigning CNA.

https://www.ibm.com/support/pages/node/7289130 vendor-advisorypatch

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

Remediations (10)

Microsoft Update Catalog

web:catalog.update.microsoft.com

Welcome to the Microsoft Update Catalog site. We want your feedback! Visit our newsgroup or send us an email to provide us with your thoughts and suggestions. To get started using the site, enter in your search terms in the Search box above or visit our FAQ for search tips. |Newsgroup|Send us your feedback

2026-09-25 10:47 UTC
CVE-2026-17504 - This Power System update is being released to address

web:cvefeed.io

The following list is the news that have been mention CVE-2026-17504 vulnerability anywhere in the article. Results are limited to the first 20 news articles due to potential performance issues. The following table lists the changes that have been made to the CVE-2026-17504 vulnerability over time.

2026-09-25 10:47 UTC
CVE-2026-17504: IBM PowerVM Hypervisor Vulnerability - CVETodo

web:cvetodo.com

CVE-2026-17504 is a CVSS 5.1 medium-severity vulnerability in IBM products. Full technical analysis, mitigations , and exploit status — updated in real time.

2026-09-25 10:47 UTC
Security Advisories and Bulletins | Microsoft Learn

web:learn.microsoft.com

In this library you will find the following security documents that have been released by the Microsoft Security Response Center (MSRC). The MSRC investigates all reports of security vulnerabilities affecting Microsoft products and services, and releases these documents as part of the ongoing effort to help you manage security risks and help keep your systems protected. Please use the ...

2026-09-25 10:47 UTC
Security Update Guide - Microsoft Security Response Center

web:msrc.microsoft.com

Security Update Guide - Microsoft Security Response Center

2026-09-25 10:47 UTC
CVE-2026-17504 - vulnerability database | Vulners.com

web:vulners.com

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

2026-09-25 10:47 UTC
CVE-2026-17504 - Detail CVSS, EPSS & CISA Kev | CVE Find

web:www.cvefind.com

Full details for CVE-2026-17504 : technical description, impact, CVSS/EPSS scores, linked CWE, CAPEC, affected CPEs, disclosure date, and mitigation options.

2026-09-25 10:47 UTC
DSA-2026-175: Security Update for Dell Client Platform for Multiple ...

web:www.dell.com

Dell Client Platform remediation is available for multiple STMicron TPM vulnerabilities that could be exploited by malicious users to compromise the affected system.

2026-09-25 10:47 UTC
Security Bulletin: This Power System update is being released to ... - IBM

web:www.ibm.com

CVEID: CVE-2026-17504 DESCRIPTION: Power Systems Firmware is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the partition firmware runtime, causing it to crash with possible memory corruption

2026-09-25 10:47 UTC
Patch Tuesday September 2026: Security Updates & CVE Analysis

web:zecurit.com

Get the complete breakdown of Microsoft's September 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

2026-09-25 10:47 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-17504.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-17504",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-24T14:31:35.705386Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-24T14:31:41.326Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1120.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1120.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1120.01:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1120.01.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1110.31:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1110.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1060.81:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1060.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw950.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw950.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw950.h3:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw950.h3.0:*:*:*:*:*:*:*"
          ],
          "product": "PowerVM Hypervisor",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "FW1120.01",
              "status": "affected",
              "version": "FW1120.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW1110.31",
              "status": "affected",
              "version": "FW1110.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW1060.81",
              "status": "affected",
              "version": "FW1060.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW950.H3",
              "status": "affected",
              "version": "FW950.00",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "<p>IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the partition firmware runtime, causing it to crash with possible memory corruption.</p>"
            }
          ],
          "value": "IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the partition firmware runtime, causing it to crash with possible memory corruption."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-191",
              "description": "CWE-191 Integer Underflow (Wrap or Wraparound)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T14:07:42.487Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7289130"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "<p>Customers with the products below should install FW1110.32(1110_138), FW1120.02(1120_171), or newer to remediate this vulnerability.<br/>Power 11</p><ol><li>IBM Power System E1180 (9080-HEU)</li></ol><p>Customers with the products below should install FW1110.32(1110_160), FW1120.02(1120_195), or newer to remediate this vulnerability.<br/>Power 11</p><ol><li>IBM Power System S1122 (9824-22A)</li><li>IBM Power System S1124 (9824-42A)</li><li>IBM Power System S1122s (9824-22B)</li><li>IBM Power System S1114 (9824-41B)</li><li>IBM Power System L1122 (9856-22H)</li><li>IBM Power System L1124 (9856-42H)</li><li>IBM Power System E1150 (9043-MRU)</li></ol><p>Customers with the products below should install FW1120.02(1120_195), or newer to remediate this vulnerability.</p><p>Power 11</p><ol><li>IBM Power System S1112 (9242-21B, 9242-21T)</li></ol><p><br/>Customers with the products below should install FW1060.82(1060_189), or newer to remediate this vulnerability.<br/>Power 10</p><ol><li>IBM Power System E1080 (9080-HEX)</li></ol><p>Customers with the products below should install\u00a0 FW1060.82(1060_199), or newer to remediate this vulnerability.<br/>Power 10</p><ol><li>IBM Power System S1022 (9105-22A)</li><li>IBM Power System S1024 (9105-42A)</li><li>IBM Power System S1022s (9105-22B)</li><li>IBM Power System S1014 (9105-41B)</li><li>IBM Power System L1022 (9786-22H)</li><li>IBM Power System L1024 (9786-42H)</li><li>IBM Power System E1050 (9043-MRX)</li><li>IBM Power System S1012 (9028-21B)</li></ol><p></p><p>Customers with the products below should install FW950.H4(950_236) or newer to remediate this vulnerability.<br/>Power 9</p><ol><li>IBM Power System S922 (9009-22G)</li><li>IBM Power System H922 (9223-22S)</li><li>IBM Power System S914 (9009-41G)</li><li>IBM Power System S924 (9009-42G)</li><li>IBM Power System H924 (9223-42S)</li><li>IBM Power System E950 (9040-MR9)</li><li>IBM Power System E980 (9080-M9S)</li></ol><p><em>The images mentioned above can be located at IBM Fix Central : </em><a href=\"https://www.ibm.com/support/fixcentral/\" rel=\"noopener noreferrer nofollow\"><em>https://www.ibm.com/support/fixcentral/</em></a></p>"
            }
          ],
          "value": "Customers with the products below should install FW1110.32(1110_138), FW1120.02(1120_171), or newer to remediate this vulnerability.\nPower 11\n\n  *  IBM Power System E1180 (9080-HEU)\n\n\nCustomers with the products below should install FW1110.32(1110_160), FW1120.02(1120_195), or newer to remediate this vulnerability.\nPower 11\n\n  *  IBM Power System S1122 (9824-22A)\n  *  IBM Power System S1124 (9824-42A)\n  *  IBM Power System S1122s (9824-22B)\n  *  IBM Power System S1114 (9824-41B)\n  *  IBM Power System L1122 (9856-22H)\n  *  IBM Power System L1124 (9856-42H)\n  *  IBM Power System E1150 (9043-MRU)\n\n\nCustomers with the products below should install FW1120.02(1120_195), or newer to remediate this vulnerability.\n\n\n\nPower 11\n\n  *  IBM Power System S1112 (9242-21B, 9242-21T)\n\n\n\nCustomers with the products below should install FW1060.82(1060_189), or newer to remediate this vulnerability.\nPower 10\n\n  *  IBM Power System E1080 (9080-HEX)\n\n\nCustomers with the products below should install\u00a0 FW1060.82(1060_199), or newer to remediate this vulnerability.\nPower 10\n\n  *  IBM Power System S1022 (9105-22A)\n  *  IBM Power System S1024 (9105-42A)\n  *  IBM Power System S1022s (9105-22B)\n  *  IBM Power System S1014 (9105-41B)\n  *  IBM Power System L1022 (9786-22H)\n  *  IBM Power System L1024 (9786-42H)\n  *  IBM Power System E1050 (9043-MRX)\n  *  IBM Power System S1012 (9028-21B)\n\n\n\n\n\n\nCustomers with the products below should install FW950.H4(950_236) or newer to remediate this vulnerability.\nPower 9\n\n  *  IBM Power System S922 (9009-22G)\n  *  IBM Power System H922 (9223-22S)\n  *  IBM Power System S914 (9009-41G)\n  *  IBM Power System S924 (9009-42G)\n  *  IBM Power System H924 (9223-42S)\n  *  IBM Power System E950 (9040-MR9)\n  *  IBM Power System E980 (9080-M9S)\n\n\nThe images mentioned above can be located at IBM Fix Central :  https://www.ibm.com/support/fixcentral/ https://www.ibm.com/support/fixcentral/"
        }
      ],
      "title": "This Power System update is being released to address"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-17504",
    "datePublished": "2026-09-24T14:07:42.487Z",
    "dateReserved": "2026-07-26T19:28:06.549Z",
    "dateUpdated": "2026-09-24T14:31:41.326Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}