IBM PowerVM Hypervisor Format String Flaw (FW1060-1120) Vulnerability
CVE-2026-15961 Published on August 19, 2026
Power System Information Disclosure
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings.
Vulnerability Analysis
CVE-2026-15961 can be exploited with local system access, and requires user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
Use of Externally-Controlled Format String
The software uses a function that accepts a format string as an argument, but the format string originates from an external source.
Products Associated with CVE-2026-15961
stack.watch emails you whenever new vulnerabilities are published in IBM Powervm Hypervisor or IBM Power Systems Firmware. Just hit a watch button to start following.
Affected Versions
IBM PowerVM Hypervisor:- Version FW1120.00 is affected.
- Version FW1110.00, <= FW1110.30 is affected.
- Version FW1060.00, <= FW1060.80 is affected.