{"id":"CVE-2026-17427","kind":"vulnerability","aliases":["CVE-2026-17427"],"related":[],"title":"IBM Power Systems firmware: oversized input can crash the system remotely","description":"IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length.","summary":"IBM Power Systems firmware does not properly check the length of input it receives, so a remote attacker can cause a denial of service. The sources describe a crash or outage, not code execution or data theft.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["firmware","ibm-power","infrastructure","on-prem","power-systems"],"not_affected_if":["firmware-outside-listed-ranges"],"how_to_check":"- Check the firmware level on the Power Systems server (for example in the HMC or the Advanced System Management interface), and compare it with the affected ranges `FW1060.00` through `FW1060.81`, `OP940.00` through `OP940.A2`, `OP910.00` through `OP910.95`, and `OP940.00` through `OP940.82`.","fix":null,"status":"open","published_at":"2026-11-08T20:17:24+00:00","first_seen_at":"2026-11-08T20:22:47+00:00","triaged_at":"2026-11-08T20:23:31+00:00","updated_at":"2026-11-08T20:23:31+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-08T20:23:31Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM Power Systems firmware: oversized input can crash the system remotely","impact":"low","summary":"IBM Power Systems firmware does not properly check the length of input it receives, so a remote attacker can cause a denial of service. The sources describe a crash or outage, not code execution or data theft.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ibm-power","power-systems","firmware","on-prem"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Remote attacker crashes the firmware, causing a denial of service","analyst_note":"Confirm the fixed firmware levels and any interim setting from the IBM security bulletin for CVE-2026-17427; the NVD entry gives no fix.","how_to_check":"- Check the firmware level on the Power Systems server (for example in the HMC or the Advanced System Management interface), and compare it with the affected ranges `FW1060.00` through `FW1060.81`, `OP940.00` through `OP940.A2`, `OP910.00` through `OP910.95`, and `OP940.00` through `OP940.82`.\n- unknown for any other check; the sources do not say how to test for remote reachability.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["firmware-outside-listed-ranges"],"who_is_affected":"Organizations running IBM Power Systems servers on the affected firmware levels are exposed. The sources do not say which management or network interfaces are reachable by default, so the exposure depends on how the server is connected; servers on firmware outside the listed ranges can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000761,"input_tokens":4567,"output_tokens":608,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-17427':14A,17A '-2026':13A,16A 'allow':84C 'attack':46B,87C 'caus':48B,89C 'check':36B 'code':61B 'could':83C 'crash':8A,57B 'cve':12A,15A 'data':64B 'denial':50B,91C 'describ':55B 'due':94C 'execut':62B 'firmwar':4A,18B,32B,69C 'fw1060.00':70C 'fw1060.81':72C 'ibm':1A,20B,29B,66C 'ibm-pow':19B 'improp':96C 'infrastructur':22B 'input':6A,40B,99C 'length':38B,100C 'on-prem':23B 'op910.00':76C 'op910.95':78C 'op940.00':73C,80C 'op940.82':82C 'op940.a2':75C 'outag':59B 'overs':5A 'power':2A,21B,27B,30B,67C 'power-system':26B 'prem':25B 'proper':35B 'receiv':42B 'remot':11A,45B,86C 'servic':52B,93C 'sourc':54B 'system':3A,10A,28B,31B,68C 'theft':65B 'valid':97C","nicknames":[],"mitigations":[],"who_affected":"Organizations running IBM Power Systems servers on the affected firmware levels are exposed. The sources do not say which management or network interfaces are reachable by default, so the exposure depends on how the server is connected; servers on firmware outside the listed ranges can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["firmware","ibmpower","infrastructure","medium","onprem","powersystems"],"campaign_type":null,"search_a":"'-17427':14A,17A '-2026':13A,16A 'crash':8A 'cve':12A,15A 'firmwar':4A 'ibm':1A 'input':6A 'overs':5A 'power':2A 'remot':11A 'system':3A,10A","search_b":"'attack':46B 'caus':48B 'check':36B 'code':61B 'crash':57B 'data':64B 'denial':50B 'describ':55B 'execut':62B 'firmwar':18B,32B 'ibm':20B,29B 'ibm-pow':19B 'infrastructur':22B 'input':40B 'length':38B 'on-prem':23B 'outag':59B 'power':21B,27B,30B 'power-system':26B 'prem':25B 'proper':35B 'receiv':42B 'remot':45B 'servic':52B 'sourc':54B 'system':28B,31B 'theft':65B","search_c":"'allow':84C 'attack':87C 'caus':89C 'could':83C 'denial':91C 'due':94C 'firmwar':69C 'fw1060.00':70C 'fw1060.81':72C 'ibm':66C 'improp':96C 'input':99C 'length':100C 'op910.00':76C 'op910.95':78C 'op940.00':73C,80C 'op940.82':82C 'op940.a2':75C 'power':67C 'remot':86C 'servic':93C 'system':68C 'valid':97C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T20:17:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-17427","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17427","severity":null,"published_at":"2026-11-08T20:17:24+00:00","modified_at":"2026-11-08T20:17:24+00:00","first_seen_at":"2026-11-08T20:22:47+00:00","fetched_at":"2026-11-08T20:22:47+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}