CVE-2026-4937

EPSS 0.13%
Veröffentlicht 19.08.2026 20:11:01
Zuletzt bearbeitet 25.08.2026 20:33:37
Erkennungen
Login

Power System Insufficient Entropy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 0 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.13%	0.026

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6	1.5	4	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
IBM	5.3	0.8	4	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

CWE-331 Insufficient Entropy

The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

https://www.ibm.com/support/pages/node/7283900

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-4937

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-4937

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-4937

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-4937