{"id":"CVE-2026-17426","kind":"vulnerability","aliases":["CVE-2026-17426"],"related":[],"title":"IBM Power Systems firmware: unhandled exception lets remote attacker crash service","description":"IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception.","summary":"IBM Power Systems Firmware versions FW1060.00 through FW1060.81 fail to handle an exception, so a remote attacker can trigger a denial of service. The sources describe a crash or outage, not code execution or data theft.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["firmware","ibm-power","infrastructure","power-systems"],"not_affected_if":["firmware-outside-range"],"how_to_check":"- Check the firmware level on the Power Systems server (the sources do not give the exact command).\n- Compare the reported level against the affected range `FW1060.00` through `FW1060.81`.","fix":null,"status":"open","published_at":"2026-11-08T20:17:24+00:00","first_seen_at":"2026-11-08T20:22:46+00:00","triaged_at":"2026-11-08T20:23:34+00:00","updated_at":"2026-11-08T20:23:34+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-08T20:23:34Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM Power Systems firmware: unhandled exception lets remote attacker crash service","impact":"low","summary":"IBM Power Systems Firmware versions FW1060.00 through FW1060.81 fail to handle an exception, so a remote attacker can trigger a denial of service. The sources describe a crash or outage, not code execution or data theft.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ibm-power","power-systems","firmware"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"remote attacker crashes the firmware, causing service outage","analyst_note":"Check the IBM security bulletin for CVE-2026-17426 for the fixed firmware level and the triggering service, which the NVD entry does not state.","how_to_check":"- Check the firmware level on the Power Systems server (the sources do not give the exact command).\n- Compare the reported level against the affected range `FW1060.00` through `FW1060.81`.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["firmware-outside-range"],"who_is_affected":"Organizations running IBM Power Systems servers on firmware in the FW1060.00 to FW1060.81 range are exposed to remote denial of service. The sources do not say which network services or configurations trigger the exception, so the exposure path is unknown. Systems on other firmware levels are not in the stated range.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000723,"input_tokens":4515,"output_tokens":544,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-17426':14A,17A '-2026':13A,16A 'allow':70C 'attack':9A,42B,73C 'caus':75C 'code':57B 'could':69C 'crash':10A,53B 'cve':12A,15A 'data':60B 'denial':46B,77C 'describ':51B 'due':80C 'except':6A,38B,84C 'execut':58B 'fail':34B 'firmwar':4A,18B,29B,65C 'fw1060.00':31B,66C 'fw1060.81':33B,68C 'handl':36B 'ibm':1A,20B,26B,62C 'ibm-pow':19B 'infrastructur':22B 'let':7A 'outag':55B 'power':2A,21B,24B,27B,63C 'power-system':23B 'remot':8A,41B,72C 'servic':11A,48B,79C 'sourc':50B 'system':3A,25B,28B,64C 'theft':61B 'trigger':44B 'unhandl':5A,83C 'version':30B","nicknames":[],"mitigations":[],"who_affected":"Organizations running IBM Power Systems servers on firmware in the FW1060.00 to FW1060.81 range are exposed to remote denial of service. The sources do not say which network services or configurations trigger the exception, so the exposure path is unknown. Systems on other firmware levels are not in the stated range.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["firmware","ibmpower","infrastructure","medium","powersystems"],"campaign_type":null,"search_a":"'-17426':14A,17A '-2026':13A,16A 'attack':9A 'crash':10A 'cve':12A,15A 'except':6A 'firmwar':4A 'ibm':1A 'let':7A 'power':2A 'remot':8A 'servic':11A 'system':3A 'unhandl':5A","search_b":"'attack':42B 'code':57B 'crash':53B 'data':60B 'denial':46B 'describ':51B 'except':38B 'execut':58B 'fail':34B 'firmwar':18B,29B 'fw1060.00':31B 'fw1060.81':33B 'handl':36B 'ibm':20B,26B 'ibm-pow':19B 'infrastructur':22B 'outag':55B 'power':21B,24B,27B 'power-system':23B 'remot':41B 'servic':48B 'sourc':50B 'system':25B,28B 'theft':61B 'trigger':44B 'version':30B","search_c":"'allow':70C 'attack':73C 'caus':75C 'could':69C 'denial':77C 'due':80C 'except':84C 'firmwar':65C 'fw1060.00':66C 'fw1060.81':68C 'ibm':62C 'power':63C 'remot':72C 'servic':79C 'system':64C 'unhandl':83C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T20:17:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-17426","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17426","severity":null,"published_at":"2026-11-08T20:17:24+00:00","modified_at":"2026-11-08T20:17:24+00:00","first_seen_at":"2026-11-08T20:22:46+00:00","fetched_at":"2026-11-08T20:22:46+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}