VULNERABILITY INTELLIGENCE
CVE-2026-19321
CVSS score6.7 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-08-19
Last modified2026-08-25
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H
Description
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers that should be inaccessible to the service processor. Successful exploitation could result in limited confidentiality or availability impacts to the affected host system.
Weakness classification
- psirt@us.ibm.com: CWE-190
Primary references
- psirt@us.ibm.com — Vendor Advisory