CVE-2026-17063 is an incorrect authorization vulnerability (CWE-863) in IBM Power Systems Firmware affecting versions FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80. The flaw exists in the interface between the Baseboard Management Controller (BMC)/Flexible Service Processor (FSP) and the host system. An attacker with elevated privileges on the BMC/FSP (service account or root) can access and disrupt the host processor state, potentially impacting the confidentiality and availability of the managed system and all hosted partitions.

The vulnerability allows an attacker with high privileges on the BMC/FSP to disrupt the host processor state, which can lead to confidentiality breaches and availability disruptions affecting the entire managed system and all hosted partitions. The CVSS 3.1 score is 7.9 (high severity), reflecting local attack vector with low complexity, requiring high privileges, no user interaction, and a scope change with high confidentiality and availability impacts.

No patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is available, restrict access to the BMC/FSP to trusted administrators only and monitor for unauthorized access.