CVE-2026-19321
Power System Integer Overflow
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers that should be inaccessible to the service processor. Successful exploitation could result in limited confidentiality or availability impacts to the affected host system.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
6.7
Power System Integer Overflow
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers that should be inaccessible to the service processor. Successful exploitation could result in limited confidentiality or availability impacts to the affected host system.
- Record
CVE-2026-19321- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2026-62682
6.7
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers that should be inaccessible to the service processor. Successful exploitation could result in limited confidentiality or availability impacts to the affected host system.
- Record
EUVD-2026-62682- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-xw82-fpcp-cg6q
6.7
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is...
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers that should be inaccessible to the service processor. Successful exploitation could result in limited confidentiality or availability impacts to the affected host system.
- Record
GHSA-xw82-fpcp-cg6q- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
NVD
6.7
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers that should be inaccessible to the service processor. Successful exploitation could result in limited confidentiality or availability impacts to the affected host system.
- Record
CVE-2026-19321- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
Affected products
- ibm power systems firmware
- ibm power system e1050 \(9043-mrx\) firmware
- ibm power system e1080 \(9080-hex\) firmware
- ibm power system e1150 \(9043-mru\) firmware
- ibm power system e1180 \(9080-heu\) firmware
- ibm power system l1022 \(9786-22h\) firmware
- ibm power system l1024 \(9786-42h\) firmware
- ibm power system l1122 \(9856-22h\) firmware
- ibm power system l1124 \(9856-42h\) firmware
- ibm power system s1012 \(9028-21b\) firmware
- ibm power system s1014 \(9105-41b\) firmware
- ibm power system s1022 \(9105-22a\) firmware
Show 8 moreShow less
- ibm power system s1022s \(9105-22b\) firmware
- ibm power system s1024 \(9105-42a\) firmware
- ibm power system s1112 \(9242-21b\) firmware
- ibm power system s1112 \(9242-21t\) firmware
- ibm power system s1114 \(9824-41b\) firmware
- ibm power system s1122 \(9824-22a\) firmware
- ibm power system s1122s \(9824-22b\) firmware
- ibm power system s1124 \(9824-42a\) firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-19321 is a medium vulnerability (CVSS 6.7) in Ibm Power Systems Firmware, published August 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 4th percentile. No source names a fixed version.