CVE-2026-17427mediumCWE-617

CVE-2026-17427: fallo de gravedad media en IBM OPENBMC

This Power System update is being released to address

Publicada el

Seguir esta CVE+ Monitorear OPENBMC+ Monitorear Power Hardware Management Console

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

10Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.5
IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
IBM · OPENBMCIBM · Power Hardware Management Console
CVEs relacionadas — IBM OPENBMC

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-38960MEDIUMCVE-2021-38960EPSS 1.1%CVE-2021-38961MEDIUMCVE-2021-38961EPSS 0.7%CVE-2024-56477MEDIUMIBM Power Hardware Management Console directory traversalEPSS 0.5%CVE-2026-18849MEDIUMIBM OpenBMC Code ExecutionEPSS 0.4%CVE-2026-7868MEDIUMThis Power System update is being released to address incorrect authorizationEPSS 0.4%CVE-2026-8058MEDIUMThis Power System update is being released to address a sensitive information disclosureEPSS 0.4%