FKIE_CVE-2026-18870

Vulnerability from fkie_nvd - Published: 2026-09-24 15:17 - Updated: 2026-09-30 16:00
Summary
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
References
Impacted products
Vendor Product Version
ibm power_system_s1122_\(9824-22a\)_firmware *
ibm power_system_s1122_\(9824-22a\)_firmware *
ibm power_system_s1122_\(9824-22a\) -
ibm power_system_s1124_\(9824-42a\)_firmware *
ibm power_system_s1124_\(9824-42a\)_firmware *
ibm power_system_s1124_\(9824-42a\) -
ibm power_system_s1122s_\(9824-22b\)_firmware *
ibm power_system_s1122s_\(9824-22b\)_firmware *
ibm power_system_s1122s_\(9824-22b\) -
ibm power_system_s1114_\(9824-41b\)_firmware *
ibm power_system_s1114_\(9824-41b\)_firmware *
ibm power_system_s1114_\(9824-41b\) -
ibm power_system_l1122_\(9856-22h\)_firmware *
ibm power_system_l1122_\(9856-22h\)_firmware *
ibm power_system_l1122_\(9856-22h\) -
ibm power_system_l1124_\(9856-42h\)_firmware *
ibm power_system_l1124_\(9856-42h\)_firmware *
ibm power_system_l1124_\(9856-42h\) -
ibm power_system_e1150_\(9043-mru\)_firmware *
ibm power_system_e1150_\(9043-mru\)_firmware *
ibm power_system_e1150_\(9043-mru\) -
ibm power_system_s1112_\(9242-21b\)_firmware *
ibm power_system_s1112_\(9242-21b\) -
ibm power_system_s1112_\(9242-21t\)_firmware *
ibm power_system_s1112_\(9242-21t\) -
ibm power_system_e1080_\(9080-hex\)_firmware *
ibm power_system_e1080_\(9080-hex\) -
ibm power_system_s1022_\(9105-22a\)_firmware *
ibm power_system_s1022_\(9105-22a\) -
ibm power_system_s1024_\(9105-42a\)_firmware *
ibm power_system_s1024_\(9105-42a\) -
ibm power_system_s1022s_\(9105-22b\)_firmware *
ibm power_system_s1022s_\(9105-22b\) -
ibm power_system_s1014_\(9105-41b\)_firmware *
ibm power_system_s1014_\(9105-41b\) -
ibm power_system_l1022_\(9786-22h\)_firmware *
ibm power_system_l1022_\(9786-22h\) -
ibm power_system_l1024_\(9786-42h\)_firmware *
ibm power_system_l1024_\(9786-42h\) -
ibm power_system_e1050_\(9043-mrx\)_firmware *
ibm power_system_e1050_\(9043-mrx\) -
ibm power_system_s1012_\(9028-21b\)_firmware *
ibm power_system_s1012_\(9028-21b\) -
ibm power_system_e1180_\(9080-heu\)_firmware *
ibm power_system_e1180_\(9080-heu\)_firmware *
ibm power_system_e1180_\(9080-heu\) -
ibm power_system_s922_\(9009-22g\)_firmware *
ibm power_system_s922_\(9009-22g\) -
ibm power_system_h922_\(9223-22s\)_firmware *
ibm power_system_h922_\(9223-22s\) -
ibm power_system_s914_\(9009-41g\)_firmware *
ibm power_system_s914_\(9009-41g\) -
ibm power_system_s924_\(9009-42g\)_firmware *
ibm power_system_s924_\(9009-42g\) -
ibm power_system_h924_\(9223-42s\)_firmware *
ibm power_system_h924_\(9223-42s\) -
ibm power_system_e950_\(9040-mr9\)_firmware *
ibm power_system_e950_\(9040-mr9\) -
ibm power_system_e980_\(9080-m9s\)_firmware *
ibm power_system_e980_\(9080-m9s\) -

{
  "affected": [
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1120.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1120.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1120.01:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1120.01.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1110.31:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1110.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1060.81:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw1060.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw950.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw950.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw950.h3:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:powervm_hypervisor:fw950.h3.0:*:*:*:*:*:*:*"
          ],
          "product": "PowerVM Hypervisor",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "FW1120.01",
              "status": "affected",
              "version": "FW1120.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW1110.31",
              "status": "affected",
              "version": "FW1110.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW1060.81",
              "status": "affected",
              "version": "FW1060.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW950.H3",
              "status": "affected",
              "version": "FW950.00",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1122_\\(9824-22a\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7EA43BB6-6776-4E2F-A279-E30E844EF1C2",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1122_\\(9824-22a\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC2FA374-2ADB-45C1-ACA1-D39BAD709067",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1122_\\(9824-22a\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "96C2DEDC-012D-4B9F-B9DF-344A49B67E46",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1124_\\(9824-42a\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9475E71-FA18-43A1-902A-2E21C777D254",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1124_\\(9824-42a\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A66F38F0-55B5-444F-968D-718170852B0A",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1124_\\(9824-42a\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F51514A-8E29-42D1-B874-838F8A0869D2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1122s_\\(9824-22b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D11BE622-6276-49D9-B394-EB615E3C5BFD",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1122s_\\(9824-22b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9E20EAA-BBEE-4924-9BBA-07D6DE018509",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1122s_\\(9824-22b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "26E1E16B-8F95-46EC-BAA0-0A53F332292B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1114_\\(9824-41b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7048C65-6872-4F5B-9691-D74E269E1CF9",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1114_\\(9824-41b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "96EEE277-E80A-4380-A4C4-9E2CCF6E8C52",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1114_\\(9824-41b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8688E552-BE38-4EB9-8514-D7060C548C39",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_l1122_\\(9856-22h\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB22063C-C9A0-4D69-95FC-3B19ACDC6B21",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_l1122_\\(9856-22h\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "76154775-CAE7-43F1-A14D-CA092F5539D1",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_l1122_\\(9856-22h\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C8998E4-5EA9-4C7E-BF59-644CB78D00D2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_l1124_\\(9856-42h\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "82AEF0FF-068C-4123-BEFB-7D3584F1B15A",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_l1124_\\(9856-42h\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "82BC7AD7-3F24-4EE7-9360-4024A6CC319C",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_l1124_\\(9856-42h\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FB6FA2C-70A5-4F19-B64B-7502D20CFE5C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e1150_\\(9043-mru\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "57896A45-2625-4C51-9B3E-5B934979FA33",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e1150_\\(9043-mru\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4AB43439-0F5B-4839-A109-E14E726CAD27",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e1150_\\(9043-mru\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC9D9EFF-1E92-4894-9976-001227F78869",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1112_\\(9242-21b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F95F4E4A-7374-40FB-AC3B-AEF7AE607CEF",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1112_\\(9242-21b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3F5100A-FE2A-412C-9B57-B616B97B1142",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1112_\\(9242-21t\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D79F90A7-5929-4893-BC72-4CF11BDB4F9D",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1112_\\(9242-21t\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA825307-2083-4264-8E8B-798661285261",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e1080_\\(9080-hex\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1681A01A-7020-427B-848A-6E3CC0FE1E5F",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e1080_\\(9080-hex\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF85251B-E02C-4293-98F0-D331BF51CAC4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1022_\\(9105-22a\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E228E48-523F-4486-8A29-5DB61851B1F3",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1022_\\(9105-22a\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3E15C41-9CBD-4F66-A176-07B3E9BBD81D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1024_\\(9105-42a\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "38AE73EA-12AE-4E46-8435-259AD1773403",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1024_\\(9105-42a\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E49EE658-B8AE-48F7-A765-92BA3A630AA0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1022s_\\(9105-22b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DD0351D8-3E79-4A28-BC5E-ADD9551238BB",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1022s_\\(9105-22b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "564A665A-7B94-40CE-A4D9-CDD0CCF52B2E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1014_\\(9105-41b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5578070-8EEC-4A76-A07F-5094DCF69A49",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1014_\\(9105-41b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ECD54B80-5754-4C19-AE0C-F539DEF96DCB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_l1022_\\(9786-22h\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7097B3B4-A5BF-4B60-8FAA-6D8D4BA1A44E",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_l1022_\\(9786-22h\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2C09090-C18F-464A-8DEF-E23B5990E2A4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_l1024_\\(9786-42h\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E9CBB70-ACFC-4904-8CFB-16D3672FE3CA",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_l1024_\\(9786-42h\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0170400B-89A7-4B44-9AA7-9A168C9CAE9C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e1050_\\(9043-mrx\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA91958A-CDF9-4360-8886-00E38A8B7366",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e1050_\\(9043-mrx\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "061D193E-84BC-4DE7-96C4-B75D11769ED5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1012_\\(9028-21b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F1D438E-4AFC-4BAC-AD5B-B6152FFEA821",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1012_\\(9028-21b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7BED85F2-8CCB-417C-A739-23828966A036",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e1180_\\(9080-heu\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A492561-E2C8-4EAE-8D31-F20DA413BABC",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e1180_\\(9080-heu\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "90F8D763-A95F-4189-82DB-1DD6B134D244",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e1180_\\(9080-heu\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BD4FC49-8120-4D4B-906A-1B6FA6B30FA2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s922_\\(9009-22g\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7A29250-6BFF-4BFD-8723-A584F5AFDD67",
              "versionEndExcluding": "fw950.h4",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s922_\\(9009-22g\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "95E5E77F-A5BB-46E7-B6B6-B02F242DE829",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_h922_\\(9223-22s\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "852BF98B-82A6-4A6A-9541-BB65A2CDF650",
              "versionEndExcluding": "fw950.h4",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_h922_\\(9223-22s\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E7851003-8D6B-4FE8-87D7-BE968E85E448",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s914_\\(9009-41g\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D71B426C-DDDF-4341-9A2E-6A36569A1839",
              "versionEndExcluding": "fw950.h4",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s914_\\(9009-41g\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "003F591A-ACCD-497E-BF8A-DE090321D778",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s924_\\(9009-42g\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0EDDB11-824F-4E4E-838C-2A5AE1A79C0C",
              "versionEndExcluding": "fw950.h4",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s924_\\(9009-42g\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4038C5DB-DF9C-4661-9590-F6A0CD4D15D5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_h924_\\(9223-42s\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A4BBB63-0102-44F0-AF76-4245872B2F89",
              "versionEndExcluding": "fw950.h4",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_h924_\\(9223-42s\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2F0E93A-26F0-4914-8A31-3C86E64D5B8A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e950_\\(9040-mr9\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4A756BD-C31D-4457-8B50-305B32E92785",
              "versionEndExcluding": "fw950.h4",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e950_\\(9040-mr9\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FF58E5C-0A54-4F2F-A426-0BFD1EACE991",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e980_\\(9080-m9s\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "52CB0665-0AE6-4A6E-A629-8AB47C7837C5",
              "versionEndExcluding": "fw950.h4",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e980_\\(9080-m9s\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BE56BD8-DB0F-4151-9428-42F1B6452D99",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read."
    }
  ],
  "id": "CVE-2026-18870",
  "lastModified": "2026-09-30T16:00:00.363",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4,
        "source": "psirt@us.ibm.com",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-18870",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-09-24T14:52:53.685284Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-09-24T15:17:20.270",
  "references": [
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.ibm.com/support/pages/node/7289135"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ],
      "source": "psirt@us.ibm.com",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…