Known vulnerabilities in PowerVC

Vendor: IBM Corporation
Software: PowerVC
Software CPE: cpe:2.3:a:ibm_corporation:powervc:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 58
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerVC PowerVC is affected by 58 known vulnerabilities: 1 critical, 10 high, 37 medium, 10 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137405 - Command injection
CVE-2026-7246		 CWE-77 Low
No
No
 - 14.07.2026 SB2026071423
SB2026071424
SB2026071440
and 13 more
#VU131746 - NULL Pointer Dereference
CVE-2026-8723		 CWE-476 Medium
No
No
 - 18.05.2026 SB2026051892
SB2026061048
SB2026062221
and 5 more
#VU130990 - Missing release of memory after effective lifetime
CVE-2026-44660		 CWE-401 Medium
No
No
 - 11.05.2026 SB2026051175
SB2026060950
SB2026073006
and 3 more
#VU130907 - Exposure of sensitive information to an unauthorized actor
CVE-2026-44431		 CWE-200 Medium
No
No
 - 09.05.2026 SB20260509126
SB2026051588
SB2026051589
and 40 more
#VU128467 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-44307		 CWE-22 Medium
No
No
 - 29.04.2026 SB2026042970
SB2026080522
#VU127176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-42310		 CWE-835 Medium
No
No
 - 23.04.2026 SB2026041113
SB2026061950
SB2026061951
and 5 more
#VU127175 - Integer overflow
CVE-2026-42308		 CWE-190 Medium
No
No
 - 23.04.2026 SB2026041113
SB2026061950
SB2026061951
and 5 more
#VU126856 - Inefficient Regular Expression Complexity
CVE-2026-4867		 CWE-1333 Low
No
No
 - 22.04.2026 SB20260422207
SB20260422208
SB2026052938
and 7 more
#VU126652 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32147		 CWE-22 Low
No
No
 - 21.04.2026 SB2026042143
SB2026051961
SB2026070964
and 3 more
#VU126548 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-41066		 CWE-611 Medium
No
No
 - 20.04.2026 SB2026042075
SB2026051813
SB2026060115
and 9 more
#VU125775 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-23941		 CWE-444 High
No
No
 2.3.2 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 6 more
#VU125774 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-23942		 CWE-22 Low
No
No
 - 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 6 more
#VU125772 - Relative Path Traversal
CVE-2026-21620		 CWE-23 Low
No
No
 - 10.04.2026 SB2026041021
SB2026041023
SB2026041024
and 6 more
#VU125750 - Server-Side Request Forgery (SSRF)
CVE-2025-62718		 CWE-918 High
No
No
 - 10.04.2026 SB2026041001
SB2026050419
SB2026050715
and 29 more
#VU125338 - Improper Certificate Validation
CVE-2026-34073		 CWE-295 Medium
No
No
 - 08.04.2026 SB2026040896
SB20260408119
SB20260408120
and 12 more
#VU125102 - Resource exhaustion
CVE-2026-39865		 CWE-400 Medium
No
No
 - 08.04.2026 SB2026040829
SB20260410109
SB20260410110
and 12 more
#VU121159 - Resource exhaustion
CVE-2025-15284		 CWE-400 Medium
No
No
 - 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 38 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 - 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU120975 - Cryptographic Issues
CVE-2025-69277		 CWE-310 Medium
No
No
 - 06.01.2026 SB2026010617
SB2026010621
SB2026010861
and 17 more
#VU120254 - Improper Handling of Length Parameter Inconsistency
CVE-2025-14847		 CWE-130 High
Available
Exploited
 - 23.12.2025 SB2025122318
SB2026011607
SB2026012973
and 9 more


Showing elements 1 - 20 out of 58