CVE-2026-15961

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings.

Scoring

Severity

MEDIUM

CVSS base score

5.2

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H

EPSS probability

0.10%

CWE

CWE-134

Published

2026-08-19

Last modified

2026-08-20

Affected products

• IBM PowerVM Hypervisor
• IBM PowerVM Hypervisor
• IBM PowerVM Hypervisor

Weakness type

• CWE-134

Related vulnerabilities

• CVE-2026-69395 — Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability
• CVE-2026-16821 — Vulnerabilities in IBM AIX and PowerVM VIOS
• CVE-2026-81574 — Format String Vulnerability in Logger
• CVE-2026-63073 — Untrusted Sender DN Used as Format String in CMP Response Validation
• CVE-2026-17136 — Vulnerabilities in IBM AIX and PowerVM VIOS
• CVE-2026-68553 — Coturn: Format String Injection via TURN USERNAME/REALM into hiredis Redis Command
• CVE-2026-12004 — Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
• CVE-2026-67244 — A format string vulnerability was found in the Notification OAuth settings of ADM

Markdown version · Browse all CVEs