CVE-2026-17427 · Infrastructure
NO FIX YET
IBM Power Systems firmware does not properly check the length of input it receives, so a remote attacker can cause a denial of service. The sources describe a crash or outage, not code execution or data theft.
first public Nov 8, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running IBM Power Systems servers on the affected firmware levels are exposed. The sources do not say which management or network interfaces are reachable by default, so the exposure depends on how the server is connected; servers on firmware outside the listed ranges can skip it.
Not affected if firmware-outside-listed-ranges
Who cares firmware, ibm-power, on-prem, power-systems
FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82.No fix yet, per the sources.
IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length.
This page as .md · .json · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.