NetSight
medium5.3

CVE-2026-4937

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative…

Impact

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested.

Affected products

VendorProductAffected versions
IbmPower System S1122 \(9824-22a\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System S1124 \(9824-42a\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System S1122s \(9824-22b\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System S1114 \(9824-41b\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System L1122 \(9856-22h\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System L1124 \(9856-42h\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System E1150 \(9043-Mru\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System E1080 \(9080-Hex\) Firmware
from fw1060.00 before fw1060.81
IbmPower System S1022 \(9105-22a\) Firmware
from fw1060.00 before fw1060.81
IbmPower System S1024 \(9105-42a\) Firmware
from fw1060.00 before fw1060.81
IbmPower System S1022s \(9105-22b\) Firmware
from fw1060.00 before fw1060.81
IbmPower System S1014 \(9105-41b\) Firmware
from fw1060.00 before fw1060.81

Weakness classification

References