Medium severity · published Aug 19, 2026
CVE-2026-19321
Power System Integer Overflow
6.7
CVSS
0.2%
EPSS
No
On KEV
Description
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers that should be inaccessible to the service processor. Successful exploitation could result in limited confidentiality or availability impacts to the affected host system.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
None
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PS
Power Systems Firmware · IBM
FW1120.00; FW1110.00 through FW1110.30; FW1060.00 through FW1060.80 · source: vendor
PS
Power System E1050 (9043-mrx) Firmware · Ibm
fw1060.00 before fw1060.81 · source: NVD
PS
Power System E1080 (9080-hex) Firmware · Ibm
fw1060.00 before fw1060.81 · source: NVD
PS
Power System E1150 (9043-mru) Firmware · Ibm
fw1110.00 before fw1110.31; fw1120.00 · source: NVD
PS
Power System E1180 (9080-heu) Firmware · Ibm
fw1110.00 before fw1110.31; fw1120.00 · source: NVD
PS
Power System L1022 (9786-22h) Firmware · Ibm
fw1060.00 before fw1060.81 · source: NVD
PS
Power System L1024 (9786-42h) Firmware · Ibm
fw1060.00 before fw1060.81 · source: NVD
PS
Power System L1122 (9856-22h) Firmware · Ibm
fw1110.00 before fw1110.31; fw1120.00 · source: NVD
PS
Power System L1124 (9856-42h) Firmware · Ibm
fw1110.00 before fw1110.31; fw1120.00 · source: NVD
PS
Power System S1012 (9028-21b) Firmware · Ibm
fw1060.00 before fw1060.81 · source: NVD
PS
Power System S1014 (9105-41b) Firmware · Ibm
fw1060.00 before fw1060.81 · source: NVD
PS
Power System S1022 (9105-22a) Firmware · Ibm
fw1060.00 before fw1060.81 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-19321
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-19321
Vendor Advisory
https://www.ibm.com/support/pages/node/7283222
More from Power Systems Firmware
9.6
CVE-2026-16687
Power System Buffer Overflow
9.6
CVE-2026-16835
Power System Improper Certificate Validation
8.8
CVE-2026-18821
Power System Out-of-bounds Write
8.8
CVE-2026-17414
Power System Improper Input Validation
8.4
CVE-2026-17091
Power System Integer Overflow
