Power System S1112 (9242-21b) Firmware vulnerabilities

14 known vulnerabilities in Power System S1112 (9242-21b) Firmware from IBM. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  PowerVM Hypervisor: Stack-based Buffer Overflow

  CVE-2026-18871Aug 19, 2026IBM

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write special

• 8.8 High severity

  PowerVM Hypervisor: Out-of-bounds Write

  CVE-2026-18821Aug 19, 2026IBM

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same n

• 8.8 High severity

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80…

  CVE-2026-17414Aug 19, 2026IBM

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access t

• 8.4 High severity

  PowerVM Hypervisor: Integer Overflow or Wraparound

  CVE-2026-17091Aug 19, 2026IBM

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a spe

• 7.9 High severity

  Power Systems Firmware: Incorrect Authorization

  CVE-2026-17063Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can acces

• 8.2 High severity

  Power Systems Firmware: Integer Overflow or Wraparound

  CVE-2026-16933Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC) is affected by a vulnerability in the interface between the

• 8.2 High severity

  PowerVM Hypervisor: Out-of-bounds Read

  CVE-2026-16707Aug 19, 2026IBM

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP

• 8.2 High severity

  PowerVM Hypervisor: Integer Overflow or Wraparound

  CVE-2026-16661Aug 19, 2026IBM

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP

• 8.2 High severity

  Power Systems Firmware: Stack-based Buffer Overflow

  CVE-2026-17494Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code

• 8.1 High severity

  Power Systems Firmware: Incorrect Authorization

  CVE-2026-17429Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/F

• 8.2 High severity

  Power Systems Firmware: Out-of-bounds Write

  CVE-2026-17100Aug 19, 2026IBM

  Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affected by a vulnerability in the service processor mailbox interface. An attacker wit

• 8.2 High severity

  Power Systems Firmware: Stack-based Buffer Overflow

  CVE-2026-17093Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware configuration par

• 8.2 High severity

  Power Systems Firmware: Missing Authorization

  CVE-2026-16930Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execu

• 8.2 High severity

  Power Systems Firmware: Stack-based Buffer Overflow

  CVE-2026-19234Aug 19, 2026IBM

  Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a malicio