CVE-2026-17494
HIGH 8.2IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.
Severe if exploited (CVSS 8.2), but no known exploitation and low modeled probability. Patch on a normal cadence.
Exploitation likelihood
0.1%chance of exploitation in 30 days · 2nd percentile
Impact if exploited
8.2CVSS 3.1 · HIGH
- ConfidentialityHigh
- IntegrityHigh
- AvailabilityHigh
What an attacker needs
- ⚠Access: Requires local access to the host
- ⚠Privileges: Requires an admin / high-privilege account
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept & exploit code
- github-search Search GitHub for public PoC repos
Test against your own equipment
curl -s https://vulnpedia.com/cve/CVE-2026-17494/poc.jsonMachine-readable PoC index for this CVE (for automation).Listed for defensive triage, patch verification, and authorized testing on systems you own. Machine-readable: /cve/CVE-2026-17494/poc.json
Affected
Vendors Ibm
Products Power Systems Firmware Power System S1122 \(9824 22a\) Firmware Power System S1122 \(9824 22a\) Power System S1124 \(9824 42a\) Firmware Power System S1124 \(9824 42a\) Power System S1122s \(9824 22b\) Firmware Power System S1122s \(9824 22b\) Power System S1114 \(9824 41b\) Firmware Power System S1114 \(9824 41b\) Power System L1122 \(9856 22h\) Firmware Power System L1122 \(9856 22h\) Power System L1124 \(9856 42h\) Firmware
Weakness (CWE)
- CWE-121: Stack-based Buffer Overflow
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Known Affected Software Configurations
| Vendor | Product | Version range |
|---|---|---|
| Ibm | Power System S1122 \(9824 22a\) Firmware | ≥ fw1110.00 and < fw1110.31 |
| Ibm | Power System S1122 \(9824 22a\) Firmware | fw1120.00 |
| Ibm | Power System S1124 \(9824 42a\) Firmware | ≥ fw1110.00 and < fw1110.31 |
| Ibm | Power System S1124 \(9824 42a\) Firmware | fw1120.00 |
| Ibm | Power System S1122s \(9824 22b\) Firmware | ≥ fw1110.00 and < fw1110.31 |
| Ibm | Power System S1122s \(9824 22b\) Firmware | fw1120.00 |
| Ibm | Power System S1114 \(9824 41b\) Firmware | ≥ fw1110.00 and < fw1110.31 |
| Ibm | Power System S1114 \(9824 41b\) Firmware | fw1120.00 |
| Ibm | Power System L1122 \(9856 22h\) Firmware | ≥ fw1110.00 and < fw1110.31 |
| Ibm | Power System L1122 \(9856 22h\) Firmware | fw1120.00 |
| Ibm | Power System L1124 \(9856 42h\) Firmware | ≥ fw1110.00 and < fw1110.31 |
| Ibm | Power System L1124 \(9856 42h\) Firmware | fw1120.00 |
| Ibm | Power System E1150 \(9043 Mru\) Firmware | ≥ fw1110.00 and < fw1110.31 |
| Ibm | Power System E1150 \(9043 Mru\) Firmware | fw1120.00 |
| Ibm | Power System S1112 \(9242 21b\) Firmware | fw1120.00 |
| Ibm | Power System S1112 \(9242 21t\) Firmware | fw1120.00 |
| Ibm | Power System E1180 \(9080 Heu\) Firmware | ≥ fw1110.00 and < fw1110.31 |
| Ibm | Power System E1180 \(9080 Heu\) Firmware | fw1120.00 |
All CVSS metrics
- HIGH 8.2 v3.1 · CNA Primary
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - HIGH 8.2 v3.1 · NVD Secondary
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H