Medium severity · published Jul 28, 2026
CVE-2026-4932
This Power System update is being released to address Insufficient Entropy
4.6
CVSS
0.1%
EPSS
No
On KEV
Description
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardware to decrypt encrypted memory due to insufficient cryptographic entropy.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
PowerVM Hypervisor · IBM
FW1110.00 through FW1110.20; FW1060.00 through FW1060.71 · source: vendor
PS
Power System E1050 (9043-mrx) Firmware · Ibm
fw1060.00 before fw1060.72 · source: NVD
PS
Power System E1080 (9080-hex) Firmware · Ibm
fw1060.00 before fw1060.72 · source: NVD
PS
Power System E1150 (9043-mru) Firmware · Ibm
fw1110.00 before fw1110.30 · source: NVD
PS
Power System E1180 (9080-heu) Firmware · Ibm
fw1110.00 before fw1110.30 · source: NVD
PS
Power System L1022 (9786-22h) Firmware · Ibm
fw1060.00 before fw1060.72 · source: NVD
PS
Power System L1024 (9786-42h) Firmware · Ibm
fw1060.00 before fw1060.72 · source: NVD
PS
Power System L1122 (9856-22h) Firmware · Ibm
fw1110.00 before fw1110.30 · source: NVD
PS
Power System L1124 (9856-42h) Firmware · Ibm
fw1110.00 before fw1110.30 · source: NVD
PS
Power System S1012 (9028-21b) Firmware · Ibm
fw1060.00 before fw1060.72 · source: NVD
PS
Power System S1014 (9105-41b) Firmware · Ibm
fw1060.00 before fw1060.72 · source: NVD
PS
Power System S1022 (9105-22a) Firmware · Ibm
fw1060.00 before fw1060.72 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-4932
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-4932
Vendor Advisory
https://www.ibm.com/support/pages/node/7280632
More from PowerVM Hypervisor
9.8
CVE-2022-34331
After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being…
9.1
CVE-2021-38917
IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of…
8.8
CVE-2023-30438
An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an…
8.4
CVE-2026-11885
Power System update in Buffer Copy
8.2
CVE-2026-96262
IBM Power Systems Firmware Buffer Overflow