CVE-2026-17511
This Power System update is being released to address
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a confidentiality impact to the managed system.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
3.4
This Power System update is being released to address
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a confidentiality impact to the managed system.
- Record
CVE-2026-17511- CVSS 3.1
- 3.4 Low
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-212
- Updated
- 2026-11-02
EUVDEUVD-2026-85891
3.4
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a confidentiality impact to the managed system.
- Record
EUVD-2026-85891- CVSS 3.1
- 3.4 Low
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hw4p-37g3-xjh8
3.4
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00...
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a confidentiality impact to the managed system.
- Record
GHSA-hw4p-37g3-xjh8- CVSS 3.1
- 3.4 Low
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-212
- Updated
- 2026-11-02
NVD
3.4
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a confidentiality impact to the managed system.
- Record
CVE-2026-17511- CVSS 3.1
- 3.4 Low
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-212
- Updated
- 2026-11-02
Affected products
- ibm powervm hypervisor
- ibm power system e1050 \(9043-mrx\) firmware
- ibm power system e1080 \(9080-hex\) firmware
- ibm power system e1150 \(9043-mru\) firmware
- ibm power system e1180 \(9080-heu\) firmware
- ibm power system e950 \(9040-mr9\) firmware
- ibm power system e980 \(9080-m9s\) firmware
- ibm power system h922 \(9223-22s\) firmware
- ibm power system h924 \(9223-42s\) firmware
- ibm power system l1022 \(9786-22h\) firmware
- ibm power system l1024 \(9786-42h\) firmware
- ibm power system l1122 \(9856-22h\) firmware
Show 15 moreShow less
- ibm power system l1124 \(9856-42h\) firmware
- ibm power system s1012 \(9028-21b\) firmware
- ibm power system s1014 \(9105-41b\) firmware
- ibm power system s1022 \(9105-22a\) firmware
- ibm power system s1022s \(9105-22b\) firmware
- ibm power system s1024 \(9105-42a\) firmware
- ibm power system s1112 \(9242-21b\) firmware
- ibm power system s1112 \(9242-21t\) firmware
- ibm power system s1114 \(9824-41b\) firmware
- ibm power system s1122 \(9824-22a\) firmware
- ibm power system s1122s \(9824-22b\) firmware
- ibm power system s1124 \(9824-42a\) firmware
- ibm power system s914 \(9009-41g\) firmware
- ibm power system s922 \(9009-22g\) firmware
- ibm power system s924 \(9009-42g\) firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-17511 is a low vulnerability (CVSS 3.4) in Ibm Powervm Hypervisor, published September 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. No source names a fixed version.