CVE-2026-18870

Summary

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.

Affected Software

VendorProductVersion RangeStatus
IBMPowerVM HypervisorFW1120.00 <= FW1120.01affected
IBMPowerVM HypervisorFW1110.00 <= FW1110.31affected
IBMPowerVM HypervisorFW1060.00 <= FW1060.81affected
IBMPowerVM HypervisorFW950.00 <= FW950.H3affected

Weaknesses

  • CWE-125: CWE-125 Out-of-bounds Read

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References