Get real-time updates on Telegram
CVE-2026-11885: power system s1122 (9824-22a) firmware from fw1110.00 (inclusive), before fw1110.30 (exclusive); +30 more affected…
CVE-2026-11885. CVSS 3.1 base score 8.4 (HIGH, Vendor/CNA). EPSS 0.00148 (percentile 0.03685), scored 22-Oct-2026.
Affected technology
power system s1122 (9824-22a) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm
power system s1124 (9824-42a) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm
power system s1122s (9824-22b) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm
power system s1114 (9824-41b) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm
power system l1122 (9856-22h) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm
power system l1124 (9856-42h) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm
power system e1150 (9043-mru) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm
power system e1080 (9080-hex) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm
power system s1022 (9105-22a) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm
power system s1024 (9105-42a) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm
power system s1022s (9105-22b) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm
power system s1014 (9105-41b) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm
power system l1022 (9786-22h) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm
power system l1024 (9786-42h) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm
power system e1050 (9043-mrx) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm
power system s1012 (9028-21b) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm
power system e1180 (9080-heu) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm
power system e980 (9080-m9s) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
power system l922 (9008-22l) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
power system s922 (9009-22a) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
power system s922 (9009-22g) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
power system h922 (9223-22h) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
power system h922 (9223-22s) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
power system s914 (9009-41a) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
power system s914 (9009-41g) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
power system s924 (9009-42a) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
power system s924 (9009-42g) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
power system h924 (9223-42h) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
power system h924 (9223-42s) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
power system e950 (9040-mr9) firmware · from fw950.00 (inclusive), before fw950.h2 (exclusive)
ibm
PowerVM Hypervisor · FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, FW950.00 through FW950.H1
IBM
Description’s affected range: through FW1110.20
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Vendor/CNA’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality impact as none; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-120
- CCR priority
- 33.6 /100 (P4)
- CVSS 3.1
- 8.4 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H · Vendor/CNA
- EPSS
- 0.00148 · percentile 0.03685 · 2026-10-22
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-24 01:40:49.068977+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-11885.html