CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 11:23 UTC )
This week: 5,500 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,500 Show in the list Critical, last 7 days 358 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product ibm:power_system_s1012_(9028-21b)_firmware . Show all products
32 CVEs, showing 1 to 32
CVE Severity Title Published CVE-2026-7868 High 8.8 IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges. Jul 28, 2026 CVE-2026-8058 Medium 4.9 IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin use… Jul 28, 2026 CVE-2026-4932 Medium 4.6 IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardware to decrypt encrypt… Jul 28, 2026 CVE-2026-11885 High 8.4 Power System update in Buffer Copy Assigned by ibm
Jul 30, 2026 CVE-2026-15961 Medium 5.2 Power System Information Disclosure Assigned by ibm
Aug 19, 2026 CVE-2026-19234 High 8.2 Power System Buffer Overflow Assigned by ibm
Aug 19, 2026 CVE-2026-19321 Medium 6.7 Power System Integer Overflow Assigned by ibm
Aug 19, 2026 CVE-2026-17100 High 8.2 Power System Out-of-bounds Write Assigned by ibm
Aug 19, 2026 CVE-2026-17093 High 8.2 Power System Buffer Overflow Assigned by ibm
Aug 19, 2026 CVE-2026-16930 High 8.2 Power System Missing Authorization Assigned by ibm
Aug 19, 2026 CVE-2026-17429 High 8.1 Power System Incorrect Authorization Assigned by ibm
Aug 19, 2026 CVE-2026-17063 High 7.9 Power System Incorrect Authorization Assigned by ibm
Aug 19, 2026 CVE-2026-16933 High 8.2 Power System Integer Overflow Assigned by ibm
Aug 19, 2026 CVE-2026-16661 High 8.2 Power System Integer Overflow Assigned by ibm
Aug 19, 2026 CVE-2026-17414 High 8.1 Power System Improper Input Validation Assigned by ibm
Aug 19, 2026 CVE-2026-18871 High 7.3 Power System Buffer Overflow Assigned by ibm
Aug 19, 2026 CVE-2026-16724 Medium 4.5 Power System Integer Overflow Assigned by ibm
Aug 19, 2026 CVE-2026-18821 High 7.5 Power System Out-of-bounds Write Assigned by ibm
Aug 19, 2026 CVE-2026-17097 High 7.3 Power System Improper Validation Assigned by ibm
Aug 19, 2026 CVE-2026-17091 High 8.4 Power System Integer Overflow Assigned by ibm
Aug 19, 2026 CVE-2026-17028 Medium 6.5 Power System Out-of-bounds Read Assigned by ibm
Aug 19, 2026 CVE-2026-16707 High 8.2 Power System Out-of-bounds Read Assigned by ibm
Aug 19, 2026 CVE-2026-4937 Medium 5.3 Power System Insufficient Entropy Assigned by ibm
Aug 19, 2026 CVE-2026-4936 Medium 5.1 Power System Insufficient Entropy Assigned by ibm
Aug 19, 2026 CVE-2026-18849 Medium 6.8 IBM OpenBMC Code Execution Assigned by ibm
Aug 19, 2026 CVE-2026-17413 Medium 5.1 This Power System update is being released to address Assigned by ibm
Sep 24, 2026 CVE-2026-17503 Medium 5.1 This Power System update is being released to address Assigned by ibm
Sep 24, 2026 CVE-2026-17504 Medium 5.1 This Power System update is being released to address Assigned by ibm
Sep 24, 2026 CVE-2026-17511 Low 3.4 This Power System update is being released to address Assigned by ibm
Sep 24, 2026 CVE-2026-18857 Low 3.4 This Power System update is being released to address Assigned by ibm
Sep 24, 2026 CVE-2026-18870 Medium 4.3 This Power System update is being released to address Assigned by ibm
Sep 24, 2026 CVE-2026-19492 Low 3.2 This Power System update is being released to address Assigned by ibm
Sep 24, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
