# CVE-2026-4932: IBM PowerVM Hypervisor insufficient entropy in Transparent Memory Encryption

Source: https://junglewise.ai/threats/cve-2026-4932-ibm-powervm-hypervisor-insufficient-entropy-in-transparent-memory  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-28. Updated: 2026-07-28  
License: CC BY 4.0 with a link back

CVE-2026-4932 · Severity: medium · CVSS 4.2 · Published 2026-07-28

A security issue has been identified in the firmware of IBM Power10 and Power11 systems that weakens the encryption used to protect data stored in the system's memory. If an attacker has physical access to the server hardware, they may be able to bypass these protections and read sensitive information directly from the memory. To fully resolve this issue, administrators must update the system firmware and perform a full system reboot to generate new, secure encryption keys.

Technologies: [IBM PowerVM Hypervisor](https://junglewise.ai/threats/technologies/powervm-hypervisor). Vendors: [IBM](https://junglewise.ai/threats/vendors/ibm).

## Quick answers

**Is CVE-2026-4932 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-4932 being exploited in the wild.

**How severe is CVE-2026-4932?** Medium severity, with a CVSS score of 4.2, published 28 July 2026.

**Which products and versions are affected?** IBM PowerVM Hypervisor FW1110.00 - FW1110.20.

**Is there a fix for CVE-2026-4932?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-4932 attacked?** It is attacked with physical access, in device firmware.

**Am I affected by CVE-2026-4932?** Check whether you run IBM PowerVM Hypervisor at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability in the IBM PowerVM Hypervisor firmware (FW1110 and FW1060 streams) results in insufficient entropy during the generation of AES keys for Transparent Memory Encryption (TME). This weakness in cryptographic strength could allow an attacker with physical access to the TME hardware to decrypt data residing in system memory. The attack requires physical access and is considered high complexity due to the technical requirements of intercepting and decrypting TME-protected streams. Remediation requires updating to patched firmware levels (e.g., FW1110.30 or FW1060.72/80) and performing a mandatory system reboot to cycle the encryption keys.

## Affected products

- IBM PowerVM Hypervisor FW1110.00 - FW1110.20
- IBM PowerVM Hypervisor FW1060.00 - FW1060.71

## Timeline

- 2026-07-21: disclosed: Initial publication by IBM
- 2026-07-28: advisory: NVD publication date

## References

- [https://www.ibm.com/support/pages/node/7280632](https://www.ibm.com/support/pages/node/7280632)

## Related threats

- [IBM Power Systems Firmware memory corruption in service processor mailbox](https://junglewise.ai/threats/cve-2026-96265-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-is)
- [IBM Power Systems Firmware buffer overflow in service processor mailbox](https://junglewise.ai/threats/cve-2026-96264-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-is)
- [IBM Power Systems firmware image validation bypass](https://junglewise.ai/threats/cve-2026-96263-ibm-power-systems-firmware-fw1120-00-through-fw1120-01-fw1110-00)
- [IBM Power Systems Firmware stack buffer overflow in service processor](https://junglewise.ai/threats/cve-2026-96262-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-is)
- [IBM Power Systems Firmware stack-based buffer overflow in configuration parsing](https://junglewise.ai/threats/cve-2026-96261-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-is)