vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-4937

Power System Insufficient Entropy

MEDIUM
6
CVSS Score
Published: August 19, 2026 at 08:11 PM UTC
Updated: August 25, 2026 at 08:50 PM UTC
49 products affected across 1 vendorPower System E1180 (9080-heu ) FirmwarePower System E1080 (9080-hex ) FirmwarePower System L1022 (9786-22h ) Firmware

Using PowerVM Hypervisor by IBM?

Get instant alerts when new vulnerabilities affect PowerVM Hypervisor - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Power System E1050 (9043-mrx ) Firmware· IBM
95%
fw1060.00 ≤ v < fw1060.81
Affected range stops below fw1060.81, so it looks safe — our inference, not a vendor statement
ibm-power-system-e1050-9043-mrx (same device)
Power System E1080 (9080-hex ) Firmware· IBM
95%
fw1060.00 ≤ v < fw1060.81
Affected range stops below fw1060.81, so it looks safe — our inference, not a vendor statement
ibm-power-system-e1080-9080-hex (same device)
Power System E1150 (9043-mru ) Firmware· IBM
95%
fw1110.00 ≤ v < fw1110.31fw1120.00
Affected range stops below fw1110.31, so it looks safe — our inference, not a vendor statement
ibm-power-system-e1150-9043-mru (same device)
Power System E1180 (9080-heu ) Firmware· IBM
95%
fw1110.00 ≤ v < fw1110.31fw1120.00
Affected range stops below fw1110.31, so it looks safe — our inference, not a vendor statement
ibm-power-system-e1180-9080-heu (same device)
Power System E950 (9040-mr9 ) Firmware· IBM
95%
fw950.00 ≤ v < fw950.h3
Affected range stops below fw950.h3, so it looks safe — our inference, not a vendor statement
ibm-power-system-e950-9040-mr9 (same device)
Power System E980 (9080-m9s ) Firmware· IBM
95%
fw950.00 ≤ v < fw950.h3
Affected range stops below fw950.h3, so it looks safe — our inference, not a vendor statement
ibm-power-system-e980-9080-m9s (same device)
Power System H922 (9223-22s ) Firmware· IBM
95%
fw950.00 ≤ v < fw950.h3
Affected range stops below fw950.h3, so it looks safe — our inference, not a vendor statement
ibm-power-system-h922-9223-22s (same device)
Power System H924 (9223-42s ) Firmware· IBM
95%
fw950.00 ≤ v < fw950.h3
Affected range stops below fw950.h3, so it looks safe — our inference, not a vendor statement
ibm-power-system-h924-9223-42s (same device)
Power System L1022 (9786-22h ) Firmware· IBM
95%
fw1060.00 ≤ v < fw1060.81
Affected range stops below fw1060.81, so it looks safe — our inference, not a vendor statement
ibm-power-system-l1022-9786-22h (same device)
Power System L1024 (9786-42h ) Firmware· IBM
95%
fw1060.00 ≤ v < fw1060.81
Affected range stops below fw1060.81, so it looks safe — our inference, not a vendor statement
ibm-power-system-l1024-9786-42h (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

Vendor AdvisoryPatch
Source: cverecord
https://www.ibm.com/support/pages/node/7283900

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6MEDIUM[email protected]
Attack Vector
LOCAL
Complexity
LOW
Privileges
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusANALYZED
CWE
CWE-331

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card