CVE-2026-17414
Last modified
CVE-2026-17414 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition performing a network boot can prevent that partition from completing its boot sequence. EPSS estimates a 0.18% chance of exploitation in the next 30 days.
Description
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition performing a network boot can prevent that partition from completing its boot sequence. On partitions where OS secure boot is not enabled, which is the default configuration, the attacker can also substitute the boot image, compromising everything subsequently loaded by that partition. Other partitions and the managed system are not affected. Only partitions actively performing a network boot are affected, resulting in a confidentiality, integrity, and availability impact.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Power System S1122 \(9824-22a\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System S1122 \(9824-22a\) Firmware | fw1120.00 |
| Ibm | Power System S1124 \(9824-42a\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System S1124 \(9824-42a\) Firmware | fw1120.00 |
| Ibm | Power System S1122s \(9824-22b\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System S1122s \(9824-22b\) Firmware | fw1120.00 |
| Ibm | Power System S1114 \(9824-41b\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System S1114 \(9824-41b\) Firmware | fw1120.00 |
| Ibm | Power System L1122 \(9856-22h\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System L1122 \(9856-22h\) Firmware | fw1120.00 |
| Ibm | Power System L1124 \(9856-42h\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System L1124 \(9856-42h\) Firmware | fw1120.00 |
| Ibm | Power System E1150 \(9043-Mru\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System E1150 \(9043-Mru\) Firmware | fw1120.00 |
| Ibm | Power System S1112 \(9242-21b\) Firmware | fw1120.00 |
| Ibm | Power System S1112 \(9242-21t\) Firmware | fw1120.00 |
| Ibm | Power System E1080 \(9080-Hex\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System S1022 \(9105-22a\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System S1024 \(9105-42a\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System S1022s \(9105-22b\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System S1014 \(9105-41b\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System L1022 \(9786-22h\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System L1024 \(9786-42h\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System E1050 \(9043-Mrx\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System S1012 \(9028-21b\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System E1180 \(9080-Heu\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System E1180 \(9080-Heu\) Firmware | fw1120.00 |
| Ibm | Power System S922 \(9009-22g\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System H922 \(9223-22s\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System S914 \(9009-41g\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System S924 \(9009-42g\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System H924 \(9223-42s\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System E950 \(9040-Mr9\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System E980 \(9080-M9s\) Firmware | >= fw950.00, < fw950.h3 |
References
- https://www.ibm.com/support/pages/node/7283234Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-17414?
How severe is CVE-2026-17414?
How do I fix CVE-2026-17414?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-1737A vulnerability was detected in Open5GS up to 2.7.6. The aff…5.5
- CVE-2026-1738A flaw has been found in Open5GS up to 2.7.6. The impacted e…5.5
- CVE-2026-1739A vulnerability has been found in Free5GC pcf up to 1.4.1. T…7.5
- CVE-2026-1740A vulnerability was found in EFM ipTIME A8004T 14.18.2. This…9.8
- CVE-2026-1741A vulnerability was determined in EFM ipTIME A8004T 14.18.2.…6.6
- CVE-2026-17413IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.0…5.1
- CVE-2026-17416IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12…7.8
- CVE-2026-17417IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…8.8
- CVE-2026-17418IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticat…7.8
- CVE-2026-17419IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…6.5
- CVE-2026-1742A vulnerability was identified in EFM ipTIME A8004T 14.18.2.…7.2
- CVE-2026-17420IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…6.3
Are you affected by CVE-2026-17414?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST