CVE-2026-17427mediumCWE-617

CVE-2026-17427: medium-severity vulnerability in IBM OPENBMC

This Power System update is being released to address

Published

Follow this CVE+ Monitor OPENBMC+ Monitor Power Hardware Management Console

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
IBM · OPENBMCIBM · Power Hardware Management Console
Related CVEs — IBM OPENBMC

In the same product, most dangerous first.

CVE-2021-38960MEDIUMCVE-2021-38960EPSS 1.1%CVE-2021-38961MEDIUMCVE-2021-38961EPSS 0.7%CVE-2024-56477MEDIUMIBM Power Hardware Management Console directory traversalEPSS 0.5%CVE-2026-18849MEDIUMIBM OpenBMC Code ExecutionEPSS 0.4%CVE-2026-7868MEDIUMThis Power System update is being released to address incorrect authorizationEPSS 0.4%CVE-2026-8058MEDIUMThis Power System update is being released to address a sensitive information disclosureEPSS 0.4%