Vulnerability Description
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful exploitation could result in a confidentiality, integrity, and availability impact to the affected host system.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Power System S1122 \(9824-22A\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System S1122 \(9824-22A\) | - |
| Ibm | Power System S1124 \(9824-42A\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System S1124 \(9824-42A\) | - |
| Ibm | Power System S1122S \(9824-22B\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System S1122S \(9824-22B\) | - |
| Ibm | Power System S1114 \(9824-41B\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System S1114 \(9824-41B\) | - |
| Ibm | Power System L1122 \(9856-22H\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System L1122 \(9856-22H\) | - |
| Ibm | Power System L1124 \(9856-42H\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System L1124 \(9856-42H\) | - |
| Ibm | Power System E1150 \(9043-Mru\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System E1150 \(9043-Mru\) | - |
| Ibm | Power System S1112 \(9242-21B\) Firmware | fw1120.00 |
| Ibm | Power System S1112 \(9242-21B\) | - |
| Ibm | Power System S1112 \(9242-21T\) Firmware | fw1120.00 |
| Ibm | Power System S1112 \(9242-21T\) | - |
| Ibm | Power System E1080 \(9080-Hex\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System E1080 \(9080-Hex\) | - |
Related Weaknesses (CWE)
References
- https://www.ibm.com/support/pages/node/7283221Vendor Advisory
FAQ
What is CVE-2026-19234?
CVE-2026-19234 is a vulnerability with a CVSS score of 8.2 (HIGH). Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with ...
How severe is CVE-2026-19234?
CVE-2026-19234 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-19234?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Power System S1122 \(9824-22A\) Firmware, Ibm Power System S1122 \(9824-22A\), Ibm Power System S1124 \(9824-42A\) Firmware, Ibm Power System S1124 \(9824-42A\), Ibm Power System S1122S \(9824-22B\) Firmware.