CVE-2026-17511
LOWDescription
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a confidentiality impact to the managed system.
Is your site exposed to CVE-2026-17511?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| ibm | power_system_s1122_\(9824-22a\)_firmware |
| ibm | power_system_s1122_\(9824-22a\)_firmware |
| ibm | power_system_s1122_\(9824-22a\) |
| ibm | power_system_s1124_\(9824-42a\)_firmware |
| ibm | power_system_s1124_\(9824-42a\)_firmware |
| ibm | power_system_s1124_\(9824-42a\) |
| ibm | power_system_s1122s_\(9824-22b\)_firmware |
| ibm | power_system_s1122s_\(9824-22b\)_firmware |
| ibm | power_system_s1122s_\(9824-22b\) |
| ibm | power_system_s1114_\(9824-41b\)_firmware |
| ibm | power_system_s1114_\(9824-41b\)_firmware |
| ibm | power_system_s1114_\(9824-41b\) |
| ibm | power_system_l1122_\(9856-22h\)_firmware |
| ibm | power_system_l1122_\(9856-22h\)_firmware |
| ibm | power_system_l1122_\(9856-22h\) |
| ibm | power_system_l1124_\(9856-42h\)_firmware |
| ibm | power_system_l1124_\(9856-42h\)_firmware |
| ibm | power_system_l1124_\(9856-42h\) |
| ibm | power_system_e1150_\(9043-mru\)_firmware |
| ibm | power_system_e1150_\(9043-mru\)_firmware |
| ibm | power_system_e1150_\(9043-mru\) |
| ibm | power_system_s1112_\(9242-21b\)_firmware |
| ibm | power_system_s1112_\(9242-21b\) |
| ibm | power_system_s1112_\(9242-21t\)_firmware |
| ibm | power_system_s1112_\(9242-21t\) |
| ibm | power_system_e1080_\(9080-hex\)_firmware |
| ibm | power_system_e1080_\(9080-hex\) |
| ibm | power_system_s1022_\(9105-22a\)_firmware |
| ibm | power_system_s1022_\(9105-22a\) |
| ibm | power_system_s1024_\(9105-42a\)_firmware |
| ibm | power_system_s1024_\(9105-42a\) |
| ibm | power_system_s1022s_\(9105-22b\)_firmware |
| ibm | power_system_s1022s_\(9105-22b\) |
| ibm | power_system_s1014_\(9105-41b\)_firmware |
| ibm | power_system_s1014_\(9105-41b\) |
| ibm | power_system_l1022_\(9786-22h\)_firmware |
| ibm | power_system_l1022_\(9786-22h\) |
| ibm | power_system_l1024_\(9786-42h\)_firmware |
| ibm | power_system_l1024_\(9786-42h\) |
| ibm | power_system_e1050_\(9043-mrx\)_firmware |
| ibm | power_system_e1050_\(9043-mrx\) |
| ibm | power_system_s1012_\(9028-21b\)_firmware |
| ibm | power_system_s1012_\(9028-21b\) |
| ibm | power_system_e1180_\(9080-heu\)_firmware |
| ibm | power_system_e1180_\(9080-heu\)_firmware |
| ibm | power_system_e1180_\(9080-heu\) |
| ibm | power_system_s922_\(9009-22g\)_firmware |
| ibm | power_system_s922_\(9009-22g\) |
| ibm | power_system_h922_\(9223-22s\)_firmware |
| ibm | power_system_h922_\(9223-22s\) |
| ibm | power_system_s914_\(9009-41g\)_firmware |
| ibm | power_system_s914_\(9009-41g\) |
| ibm | power_system_s924_\(9009-42g\)_firmware |
| ibm | power_system_s924_\(9009-42g\) |
| ibm | power_system_h924_\(9223-42s\)_firmware |
| ibm | power_system_h924_\(9223-42s\) |
| ibm | power_system_e950_\(9040-mr9\)_firmware |
| ibm | power_system_e950_\(9040-mr9\) |
| ibm | power_system_e980_\(9080-m9s\)_firmware |
| ibm | power_system_e980_\(9080-m9s\) |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2026-17511? +
How severe is CVE-2026-17511? +
What products are affected by CVE-2026-17511? +
How do I check if I'm vulnerable to CVE-2026-17511? +
Related Vulnerabilities
follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, …
kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used …
Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia Foundation's Mediawiki - FlaggedRevs extension through 1.46.0.
Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions …
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes …
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to …