CVE-2026-11885 (GCVE-0-2026-11885)
Vulnerability from cvelistv5 – Published: 2026-07-30 16:38 – Updated: 2026-07-30 17:35
VLAI
EPSS
VEX
Title
Power System update in Buffer Copy
Summary
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity.
Severity
8.4 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-30 17:32 UTC
CWE
- CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7280628 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| IBM | PowerVM Hypervisor |
Affected:
FW1110.00 , ≤ FW1110.20
(semver)
Affected: FW1060.00 , ≤ FW1060.71 (semver) Affected: FW950.00 , ≤ FW950.H1 (semver) cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00:*:*:*:*:*:*:* cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:powervm_hypervisor:fw1110.20:*:*:*:*:*:*:* cpe:2.3:a:ibm:powervm_hypervisor:fw1110.20.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00:*:*:*:*:*:*:* cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:powervm_hypervisor:fw1060.71:*:*:*:*:*:*:* cpe:2.3:a:ibm:powervm_hypervisor:fw1060.71.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:powervm_hypervisor:fw950.00:*:*:*:*:*:*:* cpe:2.3:a:ibm:powervm_hypervisor:fw950.00.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:powervm_hypervisor:fw950.h1:*:*:*:*:*:*:* cpe:2.3:a:ibm:powervm_hypervisor:fw950.h1.0:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11885",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-30T17:32:31.432254Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-30T17:35:20.927Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1110.20:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1110.20.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1060.71:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1060.71.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw950.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw950.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw950.h1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw950.h1.0:*:*:*:*:*:*:*"
],
"product": "PowerVM Hypervisor",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "FW1110.20",
"status": "affected",
"version": "FW1110.00",
"versionType": "semver"
},
{
"lessThanOrEqual": "FW1060.71",
"status": "affected",
"version": "FW1060.00",
"versionType": "semver"
},
{
"lessThanOrEqual": "FW950.H1",
"status": "affected",
"version": "FW950.00",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity.\u003c/p\u003e"
}
],
"value": "IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-30T16:38:25.814Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7280628"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eCustomers with the products below should install FW1110.30(1110_125), or newer to remediate this vulnerability.\u003cbr/\u003ePower 11\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System E1180 (9080-HEU)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003eCustomers with the products below should install FW1110.30(1110_145), or newer to remediate this vulnerability.\u003cbr/\u003ePower 11\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System S1122 (9824-22A)\u003c/li\u003e\u003cli\u003eIBM Power System S1124 (9824-42A)\u003c/li\u003e\u003cli\u003eIBM Power System S1122s (9824-22B)\u003c/li\u003e\u003cli\u003eIBM Power System S1114 (9824-41B)\u003c/li\u003e\u003cli\u003eIBM Power System L1122 (9856-22H)\u003c/li\u003e\u003cli\u003eIBM Power System L1124 (9856-42H)\u003c/li\u003e\u003cli\u003eIBM Power System E1150 (9043-MRU)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003e\u003cbr/\u003eCustomers with the products below should install FW1060.72(1060_171)/FW1060.80(1060_180), or newer to remediate this vulnerability.\u003cbr/\u003ePower 10\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System E1080 (9080-HEX)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eCustomers with the products below should install \u00a0FW1060.72(1060_177)/FW1060.80(1060_185),\u00a0 or newer to remediate this vulnerability.\u003cbr/\u003ePower 10\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System S1022 (9105-22A)\u003c/li\u003e\u003cli\u003eIBM Power System S1024 (9105-42A)\u003c/li\u003e\u003cli\u003eIBM Power System S1022s (9105-22B)\u003c/li\u003e\u003cli\u003eIBM Power System S1014 (9105-41B)\u003c/li\u003e\u003cli\u003eIBM Power System L1022 (9786-22H)\u003c/li\u003e\u003cli\u003eIBM Power System L1024 (9786-42H)\u003c/li\u003e\u003cli\u003eIBM Power System E1050 (9043-MRX)\u003c/li\u003e\u003cli\u003eIBM Power System S1012 (9028-21B)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eCustomers with the products below should install FW950.H2(950_222) or newer to remediate this concern.\u003c/p\u003e\u003cp\u003ePower 9\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System L922 (9008-22L)\u003c/li\u003e\u003cli\u003eIBM Power System S922 (9009-22A, 9009-22G)\u003c/li\u003e\u003cli\u003eIBM Power System H922 (9223-22H, 9223-22S)\u003c/li\u003e\u003cli\u003eIBM Power System S914 (9009-41A, 9009-41G)\u003c/li\u003e\u003cli\u003eIBM Power System S924 (9009-42A, 9009-42G)\u003c/li\u003e\u003cli\u003eIBM Power System H924 (9223-42H, 9223-42S)\u003c/li\u003e\u003cli\u003eIBM Power System E950 (9040-MR9)\u003c/li\u003e\u003cli\u003eIBM Power System E980 (9080-M9S)\u003c/li\u003e\u003c/ol\u003e"
}
],
"value": "Customers with the products below should install FW1110.30(1110_125), or newer to remediate this vulnerability.\nPower 11\n\n * IBM Power System E1180 (9080-HEU)\n\n\nCustomers with the products below should install FW1110.30(1110_145), or newer to remediate this vulnerability.\nPower 11\n\n * IBM Power System S1122 (9824-22A)\n * IBM Power System S1124 (9824-42A)\n * IBM Power System S1122s (9824-22B)\n * IBM Power System S1114 (9824-41B)\n * IBM Power System L1122 (9856-22H)\n * IBM Power System L1124 (9856-42H)\n * IBM Power System E1150 (9043-MRU)\n\n\n\nCustomers with the products below should install FW1060.72(1060_171)/FW1060.80(1060_180), or newer to remediate this vulnerability.\nPower 10\n\n * IBM Power System E1080 (9080-HEX)\n\n\n\n\n\n\nCustomers with the products below should install \u00a0FW1060.72(1060_177)/FW1060.80(1060_185),\u00a0 or newer to remediate this vulnerability.\nPower 10\n\n * IBM Power System S1022 (9105-22A)\n * IBM Power System S1024 (9105-42A)\n * IBM Power System S1022s (9105-22B)\n * IBM Power System S1014 (9105-41B)\n * IBM Power System L1022 (9786-22H)\n * IBM Power System L1024 (9786-42H)\n * IBM Power System E1050 (9043-MRX)\n * IBM Power System S1012 (9028-21B)\n\n\n\n\n\n\nCustomers with the products below should install FW950.H2(950_222) or newer to remediate this concern.\n\n\n\nPower 9\n\n * IBM Power System L922 (9008-22L)\n * IBM Power System S922 (9009-22A, 9009-22G)\n * IBM Power System H922 (9223-22H, 9223-22S)\n * IBM Power System S914 (9009-41A, 9009-41G)\n * IBM Power System S924 (9009-42A, 9009-42G)\n * IBM Power System H924 (9223-42H, 9223-42S)\n * IBM Power System E950 (9040-MR9)\n * IBM Power System E980 (9080-M9S)"
}
],
"title": "Power System update in Buffer Copy"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-11885",
"datePublished": "2026-07-30T16:38:25.814Z",
"dateReserved": "2026-06-10T14:14:43.892Z",
"dateUpdated": "2026-07-30T17:35:20.927Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-11885",
"date": "2026-09-19",
"epss": "0.00101",
"percentile": "0.01001"
},
"nvd": {
"cve": {
"affected": [
{
"affectedData": [
{
"cpes": [
"cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1110.20:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1110.20.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1060.71:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1060.71.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw950.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw950.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw950.h1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw950.h1.0:*:*:*:*:*:*:*"
],
"product": "PowerVM Hypervisor",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "FW1110.20",
"status": "affected",
"version": "FW1110.00",
"versionType": "semver"
},
{
"lessThanOrEqual": "FW1060.71",
"status": "affected",
"version": "FW1060.00",
"versionType": "semver"
},
{
"lessThanOrEqual": "FW950.H1",
"status": "affected",
"version": "FW950.00",
"versionType": "semver"
}
]
}
],
"source": "psirt@us.ibm.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s1122_\\(9824-22a\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A7446690-CECC-4F76-B2D6-9D6F5087771D",
"versionEndExcluding": "fw1110.30",
"versionStartIncluding": "fw1110.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s1122_\\(9824-22a\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "96C2DEDC-012D-4B9F-B9DF-344A49B67E46",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s1124_\\(9824-42a\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "ADB79297-E73F-44F2-B619-10E5A73B5BBE",
"versionEndExcluding": "fw1110.30",
"versionStartIncluding": "fw1110.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s1124_\\(9824-42a\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F51514A-8E29-42D1-B874-838F8A0869D2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s1122s_\\(9824-22b\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7A7F8526-E3B1-4930-816A-CDF15D0E18EC",
"versionEndExcluding": "fw1110.30",
"versionStartIncluding": "fw1110.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s1122s_\\(9824-22b\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "26E1E16B-8F95-46EC-BAA0-0A53F332292B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s1114_\\(9824-41b\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9B3F6D87-A1A2-482E-A977-2C282AD78586",
"versionEndExcluding": "fw1110.30",
"versionStartIncluding": "fw1110.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s1114_\\(9824-41b\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "8688E552-BE38-4EB9-8514-D7060C548C39",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_l1122_\\(9856-22h\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "16CF6969-4E38-4C0B-82C4-1B9A82A080D3",
"versionEndExcluding": "fw1110.30",
"versionStartIncluding": "fw1110.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_l1122_\\(9856-22h\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "3C8998E4-5EA9-4C7E-BF59-644CB78D00D2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_l1124_\\(9856-42h\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6E33E2CC-0159-4B35-82B4-CAC55A7EFB36",
"versionEndExcluding": "fw1110.30",
"versionStartIncluding": "fw1110.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_l1124_\\(9856-42h\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "3FB6FA2C-70A5-4F19-B64B-7502D20CFE5C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_e1150_\\(9043-mru\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "181DFBD2-63D1-481C-909F-226E448DBE34",
"versionEndExcluding": "fw1110.30",
"versionStartIncluding": "fw1110.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_e1150_\\(9043-mru\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "AC9D9EFF-1E92-4894-9976-001227F78869",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_e1080_\\(9080-hex\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6F78F02D-DDCB-410F-82B3-88B178E78455",
"versionEndExcluding": "fw1060.72",
"versionStartIncluding": "fw1060.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_e1080_\\(9080-hex\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "DF85251B-E02C-4293-98F0-D331BF51CAC4",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s1022_\\(9105-22a\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F58A081E-15BC-4593-9849-50F1A2D94597",
"versionEndExcluding": "fw1060.72",
"versionStartIncluding": "fw1060.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s1022_\\(9105-22a\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "E3E15C41-9CBD-4F66-A176-07B3E9BBD81D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s1024_\\(9105-42a\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "63BBEE95-BD5A-47DF-8A65-AB824BB4ED9B",
"versionEndExcluding": "fw1060.72",
"versionStartIncluding": "fw1060.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s1024_\\(9105-42a\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "E49EE658-B8AE-48F7-A765-92BA3A630AA0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s1022s_\\(9105-22b\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0E7C5359-B6C1-4053-B478-0C21A4BF7912",
"versionEndExcluding": "fw1060.72",
"versionStartIncluding": "fw1060.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s1022s_\\(9105-22b\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "564A665A-7B94-40CE-A4D9-CDD0CCF52B2E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s1014_\\(9105-41b\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EDFC9BBD-E8FF-48E1-A7EB-99FA20A89E47",
"versionEndExcluding": "fw1060.72",
"versionStartIncluding": "fw1060.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s1014_\\(9105-41b\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "ECD54B80-5754-4C19-AE0C-F539DEF96DCB",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_l1022_\\(9786-22h\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "95F860E2-1170-40BB-810A-ADFAA4475027",
"versionEndExcluding": "fw1060.72",
"versionStartIncluding": "fw1060.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_l1022_\\(9786-22h\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "B2C09090-C18F-464A-8DEF-E23B5990E2A4",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_l1024_\\(9786-42h\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8E31A0F0-9145-4851-A4D3-28001365C35C",
"versionEndExcluding": "fw1060.72",
"versionStartIncluding": "fw1060.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_l1024_\\(9786-42h\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "0170400B-89A7-4B44-9AA7-9A168C9CAE9C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_e1050_\\(9043-mrx\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CDBE6EC6-7BD4-424D-B895-3D87B22C01A6",
"versionEndExcluding": "fw1060.72",
"versionStartIncluding": "fw1060.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_e1050_\\(9043-mrx\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "061D193E-84BC-4DE7-96C4-B75D11769ED5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s1012_\\(9028-21b\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "AF18870B-E9BD-49AF-944F-A6AC22E2B455",
"versionEndExcluding": "fw1060.72",
"versionStartIncluding": "fw1060.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s1012_\\(9028-21b\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "7BED85F2-8CCB-417C-A739-23828966A036",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_e1180_\\(9080-heu\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "55A85DB0-D67F-4E20-BE54-863662C180E9",
"versionEndExcluding": "fw1110.30",
"versionStartIncluding": "fw1110.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_e1180_\\(9080-heu\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "8BD4FC49-8120-4D4B-906A-1B6FA6B30FA2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_e980_\\(9080-m9s\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6CB0260B-F0E5-46F4-BB77-D23EFC2521D5",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_e980_\\(9080-m9s\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "9BE56BD8-DB0F-4151-9428-42F1B6452D99",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_l922_\\(9008-22l\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6C26C626-C99D-4F3B-AE62-F6B97FAF9200",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_l922_\\(9008-22l\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "61493605-7807-498B-9DD7-48B244AD0415",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s922_\\(9009-22a\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "99A127DE-D9B9-4741-953C-A1CD78F01AD5",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s922_\\(9009-22a\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "8AB350B1-3964-485A-AAB3-55558DD375BD",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s922_\\(9009-22g\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "58F45AA4-A2CF-43BB-9C1D-59A8AD05E0CA",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s922_\\(9009-22g\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "95E5E77F-A5BB-46E7-B6B6-B02F242DE829",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_h922_\\(9223-22h\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3BB35AB0-BA02-4991-AA07-FC157B5098EB",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_h922_\\(9223-22h\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "633D5D2E-300A-4896-8F90-57F9B7AFE01E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_h922_\\(9223-22s\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CECB50CD-E852-455A-AE87-D2F3FB640C1E",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_h922_\\(9223-22s\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "E7851003-8D6B-4FE8-87D7-BE968E85E448",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s914_\\(9009-41a\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "35C2C86A-4DAB-4074-AE12-153F66352174",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s914_\\(9009-41a\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "5D9CA070-A7E4-451A-9C3C-D2622E7A9A92",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s914_\\(9009-41g\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "961ED40B-525B-4764-B797-F20D8A049368",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s914_\\(9009-41g\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "003F591A-ACCD-497E-BF8A-DE090321D778",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s924_\\(9009-42a\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "298555E6-A209-461A-8A49-14F4882AE6F2",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s924_\\(9009-42a\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "65A41386-AAE5-409C-9355-2EEB07F01926",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_s924_\\(9009-42g\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "17369284-17F2-4FA5-B449-07454128B5CC",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_s924_\\(9009-42g\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "4038C5DB-DF9C-4661-9590-F6A0CD4D15D5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_h924_\\(9223-42h\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "497F0AA6-CD54-40BC-908B-8457A6F38C5B",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_h924_\\(9223-42h\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "24CC25C2-BE64-4022-A229-D639CED27B00",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_h924_\\(9223-42s\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6A727D2B-AAA6-4E68-8D16-CC7497BA137B",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_h924_\\(9223-42s\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "C2F0E93A-26F0-4914-8A31-3C86E64D5B8A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:power_system_e950_\\(9040-mr9\\)_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B96CFC29-E4F9-4AF3-BE90-A5852897A63A",
"versionEndExcluding": "fw950.h2",
"versionStartIncluding": "fw950.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_e950_\\(9040-mr9\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "9FF58E5C-0A54-4F2F-A426-0BFD1EACE991",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity."
}
],
"id": "CVE-2026-11885",
"lastModified": "2026-08-26T14:32:26.170",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.0,
"impactScore": 5.8,
"source": "psirt@us.ibm.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-11885",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-30T17:32:31.432254Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-07-30T17:16:27.760",
"references": [
{
"source": "psirt@us.ibm.com",
"tags": [
"Vendor Advisory"
],
"url": "https://www.ibm.com/support/pages/node/7280628"
}
],
"sourceIdentifier": "psirt@us.ibm.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-120"
}
],
"source": "psirt@us.ibm.com",
"type": "Secondary"
}
]
}
},
"vulnrichment": {
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11885",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-30T17:32:31.432254Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-30T17:32:35.460Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1110.20:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1110.20.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1060.71:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw1060.71.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw950.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw950.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw950.h1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_hypervisor:fw950.h1.0:*:*:*:*:*:*:*"
],
"product": "PowerVM Hypervisor",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "FW1110.20",
"status": "affected",
"version": "FW1110.00",
"versionType": "semver"
},
{
"lessThanOrEqual": "FW1060.71",
"status": "affected",
"version": "FW1060.00",
"versionType": "semver"
},
{
"lessThanOrEqual": "FW950.H1",
"status": "affected",
"version": "FW950.00",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity.\u003c/p\u003e"
}
],
"value": "IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-30T16:38:25.814Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7280628"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eCustomers with the products below should install FW1110.30(1110_125), or newer to remediate this vulnerability.\u003cbr/\u003ePower 11\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System E1180 (9080-HEU)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003eCustomers with the products below should install FW1110.30(1110_145), or newer to remediate this vulnerability.\u003cbr/\u003ePower 11\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System S1122 (9824-22A)\u003c/li\u003e\u003cli\u003eIBM Power System S1124 (9824-42A)\u003c/li\u003e\u003cli\u003eIBM Power System S1122s (9824-22B)\u003c/li\u003e\u003cli\u003eIBM Power System S1114 (9824-41B)\u003c/li\u003e\u003cli\u003eIBM Power System L1122 (9856-22H)\u003c/li\u003e\u003cli\u003eIBM Power System L1124 (9856-42H)\u003c/li\u003e\u003cli\u003eIBM Power System E1150 (9043-MRU)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003e\u003cbr/\u003eCustomers with the products below should install FW1060.72(1060_171)/FW1060.80(1060_180), or newer to remediate this vulnerability.\u003cbr/\u003ePower 10\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System E1080 (9080-HEX)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eCustomers with the products below should install \u00a0FW1060.72(1060_177)/FW1060.80(1060_185),\u00a0 or newer to remediate this vulnerability.\u003cbr/\u003ePower 10\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System S1022 (9105-22A)\u003c/li\u003e\u003cli\u003eIBM Power System S1024 (9105-42A)\u003c/li\u003e\u003cli\u003eIBM Power System S1022s (9105-22B)\u003c/li\u003e\u003cli\u003eIBM Power System S1014 (9105-41B)\u003c/li\u003e\u003cli\u003eIBM Power System L1022 (9786-22H)\u003c/li\u003e\u003cli\u003eIBM Power System L1024 (9786-42H)\u003c/li\u003e\u003cli\u003eIBM Power System E1050 (9043-MRX)\u003c/li\u003e\u003cli\u003eIBM Power System S1012 (9028-21B)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eCustomers with the products below should install FW950.H2(950_222) or newer to remediate this concern.\u003c/p\u003e\u003cp\u003ePower 9\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System L922 (9008-22L)\u003c/li\u003e\u003cli\u003eIBM Power System S922 (9009-22A, 9009-22G)\u003c/li\u003e\u003cli\u003eIBM Power System H922 (9223-22H, 9223-22S)\u003c/li\u003e\u003cli\u003eIBM Power System S914 (9009-41A, 9009-41G)\u003c/li\u003e\u003cli\u003eIBM Power System S924 (9009-42A, 9009-42G)\u003c/li\u003e\u003cli\u003eIBM Power System H924 (9223-42H, 9223-42S)\u003c/li\u003e\u003cli\u003eIBM Power System E950 (9040-MR9)\u003c/li\u003e\u003cli\u003eIBM Power System E980 (9080-M9S)\u003c/li\u003e\u003c/ol\u003e"
}
],
"value": "Customers with the products below should install FW1110.30(1110_125), or newer to remediate this vulnerability.\nPower 11\n\n * IBM Power System E1180 (9080-HEU)\n\n\nCustomers with the products below should install FW1110.30(1110_145), or newer to remediate this vulnerability.\nPower 11\n\n * IBM Power System S1122 (9824-22A)\n * IBM Power System S1124 (9824-42A)\n * IBM Power System S1122s (9824-22B)\n * IBM Power System S1114 (9824-41B)\n * IBM Power System L1122 (9856-22H)\n * IBM Power System L1124 (9856-42H)\n * IBM Power System E1150 (9043-MRU)\n\n\n\nCustomers with the products below should install FW1060.72(1060_171)/FW1060.80(1060_180), or newer to remediate this vulnerability.\nPower 10\n\n * IBM Power System E1080 (9080-HEX)\n\n\n\n\n\n\nCustomers with the products below should install \u00a0FW1060.72(1060_177)/FW1060.80(1060_185),\u00a0 or newer to remediate this vulnerability.\nPower 10\n\n * IBM Power System S1022 (9105-22A)\n * IBM Power System S1024 (9105-42A)\n * IBM Power System S1022s (9105-22B)\n * IBM Power System S1014 (9105-41B)\n * IBM Power System L1022 (9786-22H)\n * IBM Power System L1024 (9786-42H)\n * IBM Power System E1050 (9043-MRX)\n * IBM Power System S1012 (9028-21B)\n\n\n\n\n\n\nCustomers with the products below should install FW950.H2(950_222) or newer to remediate this concern.\n\n\n\nPower 9\n\n * IBM Power System L922 (9008-22L)\n * IBM Power System S922 (9009-22A, 9009-22G)\n * IBM Power System H922 (9223-22H, 9223-22S)\n * IBM Power System S914 (9009-41A, 9009-41G)\n * IBM Power System S924 (9009-42A, 9009-42G)\n * IBM Power System H924 (9223-42H, 9223-42S)\n * IBM Power System E950 (9040-MR9)\n * IBM Power System E980 (9080-M9S)"
}
],
"title": "Power System update in Buffer Copy"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-11885",
"datePublished": "2026-07-30T16:38:25.814Z",
"dateReserved": "2026-06-10T14:14:43.892Z",
"dateUpdated": "2026-07-30T17:35:20.927Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…