What is CVE-2026-14971?

CVE-2026-14971 is a low-severity vulnerability in Ibm Powervm Novalink, classified under CWE-16. CVSS score: 3.9/10. Published 2026-07-17.

How severe is CVE-2026-14971?

Low severity. CVSS v3 base score is 3.9 out of 10.

Vulnerability in Ibm Powervm Novalink

CVE-2026-14971

IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions.

CVSS v3 metric

CVSS v3 base score 3.9 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L.

Affected products

Ibm Powervm Novalink — versions 2.2.02.2.12.2.1.1, 2.3.02.3.0.12.3.12.3.2

Weakness classification (CWE)

CWE-16

References

psirt@us.ibm.com (vendor-advisory, patch)

Frequently asked questions

What is CVE-2026-14971?: CVE-2026-14971 is a low-severity vulnerability in Ibm Powervm Novalink, classified under CWE-16. CVSS score: 3.9/10. Published 2026-07-17.
How severe is CVE-2026-14971?: Low severity. CVSS v3 base score is 3.9 out of 10.