IBM Power Systems Firmware (FW1060.x/OP9xx) DoS via Input Length Validation
CVE-2026-17427 Published on November 8, 2026

This Power System update is being released to address
IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length.

Vendor Advisory NVD

Vulnerability Analysis

Attack Vector:

ADJACENT_NETWORK

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

NONE

Integrity Impact:

NONE

Availability Impact:

HIGH

Weakness Type

What is an assertion failure Vulnerability?

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

CVE-2026-17427 has been classified to as an assertion failure vulnerability or weakness.

Products Associated with CVE-2026-17427

stack.watch emails you whenever new vulnerabilities are published in IBM Openbmc or IBM Power Hardware Management Console. Just hit a watch button to start following.

IBM Openbmc

  Watch

IBM Power Hardware Management Console

  Watch

Affected Versions

• Version FW1060.00, <= FW1060.81 is affected.
• Version OP940.00, <= OP940.A2 is affected.
• Version OP910.00, <= OP910.95 is affected.

• Version OP940.00, <= OP940.82 is affected.