CVE-2026-14971

IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions.

Score

CVSS 3.1 7.0 High

Status

Analyzed - psirt@us.ibm.com

Published

2026-07-17

Last modified

2026-10-24

Weaknesses

CWE-16

Affected products

• Powervm Novalink (Ibm)

References

• https://www.ibm.com/support/pages/node/7280225