Quick answers
- Is CVE-2026-18870 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-18870 being exploited in the wild.
- How severe is CVE-2026-18870?
- Medium severity, with a CVSS score of 4.3, published 24 September 2026.
- Which products and versions are affected?
- IBM PowerVM Hypervisor FW1120.00-FW1120.01, FW1110.00-FW1110.31, FW1060.00-FW1060.81, FW950.00-FW950.H3.
- Is there a fix for CVE-2026-18870?
- A patch was published on 2026-09-23: Patches available: FW1110.32, FW1120.02, FW1060.82, FW950.H4 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-18870 attacked?
- It is attacked over the network or from the adjacent network, in device firmware.
- Am I affected by CVE-2026-18870?
- Check whether you run IBM PowerVM Hypervisor at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
PowerVM Hypervisor contains an out-of-bounds read vulnerability (CWE-125) affecting multiple firmware versions. The vulnerability is exploitable by a remote attacker on the adjacent network with no privileges or user interaction required, allowing disclosure of sensitive information while preserving system integrity. Patches are available for all affected firmware versions.
Affected products
- IBM PowerVM Hypervisor FW1120.00-FW1120.01, FW1110.00-FW1110.31, FW1060.00-FW1060.81, FW950.00-FW950.H3
Timeline
- 2026-09-23: disclosed: Initial publication of security bulletin
- 2026-09-23: patched: Patches available: FW1110.32, FW1120.02, FW1060.82, FW950.H4