Vulnerability in IBM Power System E1050 \(9043-Mrx\) Firmware
CVE-2026-4932
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardware to decrypt encrypted memory due to insufficient cryptographic entropy.
EPSS: 0.001 (0.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Ibm Power_system_e1050_\(9043-mrx\)_firmware
- Ibm Power_system_e1080_\(9080-hex\)_firmware
- Ibm Power_system_e1150_\(9043-mru\)_firmware
- Ibm Power_system_e1180_\(9080-heu\)_firmware
- Ibm Power_system_l1022_\(9786-22h\)_firmware
- Ibm Power_system_l1024_\(9786-42h\)_firmware
- Ibm Power_system_l1122_\(9856-22h\)_firmware
- Ibm Power_system_l1124_\(9856-42h\)_firmware
- Ibm Power_system_s1012_\(9028-21b\)_firmware
- Ibm Power_system_s1014_\(9105-41b\)_firmware
Weakness classification (CWE)
References
- psirt@us.ibm.com (vendor-advisory, patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-4932?
- CVE-2026-4932 is a medium-severity vulnerability in IBM Power System E1050 \(9043-Mrx\) Firmware, classified under Insufficient Entropy. CVSS score: 4.2/10. Published 2026-07-28.
- How severe is CVE-2026-4932?
- Medium severity. CVSS v3 base score is 4.2 out of 10.