CVE-2026-4936
Power System Insufficient Entropy
CVSS Score
5.1
EPSS Score
0.0%
EPSS Percentile
0th
IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could exploit this weakness to derive the encryption key and access the data.
| CWE | CWE-331 |
| Vendor | ibm |
| Product | powervm hypervisor |
| Published | Aug 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for ibm powervm hypervisor
Be the first to know when new medium vulnerabilities affecting ibm powervm hypervisor are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
High
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
IBM / PowerVM Hypervisor
FW1110.00 ≤ FW1110.20 FW1060.00 ≤ FW1060.71 FW950.00 ≤ FW950.H2