CVE-2026-17503
Last modified
CVE-2026-17503 is a medium-severity vulnerability rated 5.1/10 on the CVSS scale. IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter partition nvram, causing the partition to fail to boot.
Description
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter partition nvram, causing the partition to fail to boot. This condition persists until operator intervention — deleting and recreating the partition configuration — to restore normal operation. Successful exploitation results in an integrity and availability impact.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| IBM | PowerVM Hypervisor | >= FW1120.00, <= FW1120.01; >= FW1110.00, <= FW1110.31; >= FW1060.00, <= FW1060.81; >= FW950.00, <= FW950.H3 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-17503?
How severe is CVE-2026-17503?
How do I fix CVE-2026-17503?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-17497NoteGen before 0.32.0 grants the Tauri shell plugin shell:al…8.3
- CVE-2026-17499IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to…7.8
- CVE-2026-1750The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for W…8.8
- CVE-2026-17500A vulnerability was detected in ggml-org llama.cpp d006858/e…6.9
- CVE-2026-17501A flaw has been found in ggml-org llama.cpp e15efe0. This vu…6.9
- CVE-2026-17502IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker t…7.5
- CVE-2026-17504IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.0…5.1
- CVE-2026-17505The Translate Multilingual sites – TranslatePress plugin for…6.1
- CVE-2026-17506The Independent Analytics plugin for WordPress is vulnerable…7.2
- CVE-2026-17509The WPML Multilingual CMS plugin for WordPress is vulnerable…6.5
- CVE-2026-1751A vulnerability has been discovered in GitLab CE/EE affectin…3.1
- CVE-2026-17510Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a…7.5
Are you affected by CVE-2026-17503?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST