Reference page — cumulative record through Saturday, October 3, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L H N U N N H 4.4 .0010 1.0 —
AFFECTED Product Versions Fixed PowerVM Hypervisor FW1120.00 – —
TIMELINE Jul 26 Reserved by ibm Sep 24 Published (CNA: ibm) Sep 29 RESCORED — CVE-2026-17504 (IBM PowerVM Hypervisor). CVSS 5.1 → 4.4 (NVD).
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the partition firmware runtime, causing it to crash with possible memory corruption.
| Date | Event | Detail |
|---|---|---|
| July 26, 2026 | Reserved | Reserved by ibm |
| September 24, 2026 | Published | Published (CNA: ibm) |
| September 29, 2026 | RESCORED | RESCORED — CVE-2026-17504 (IBM PowerVM Hypervisor). CVSS 5.1 → 4.4 (NVD). |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| IBM | PowerVM Hypervisor | — | FW1120.00 | — |
Authoritative record: CVE-2026-17504 at cve.org
Vendors: ibm
Weaknesses: CWE-191
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-17504 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Saturday, October 3, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
