Known vulnerabilities in PowerVM NovaLink
Vendor:
IBM Corporation
Software:
PowerVM NovaLink
Software CPE:
cpe:2.3:a:ibm_corporation:powervm_novalink:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
114
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
2.2.1.1-260708
2.3.3-260714
2.3.3
2.3.2-260422
2.2.1.1-260428
2.1.1-260428
2.3.2
2.1.1-260119
2.2.1.1-260119
2.3.2-260116
2.3.1
2.3.1-251007
2.2.1.1-251007
2.1.1-251007
2.3.0.1-250610
2.2.1.1-250529
2.1.1-250528
2.0.0.0
2.2.1.1
2.2.1
2.2.0
2.3.0.1
2.3.0
2.3.0.1-252403
2.2.1.1-252403
2.1.1-250324
2.3.0-250103
2.2.1.1-250103
2.1.1-250103
2.2.1-240917
2.1.1-240913
2.2.1-240626
2.1.1-240625
2.0.3.1-240625
2.2.0-240415
2.1.1-240415
2.1.1
2.1.0
2.2.0-240119
2.1.1-240119
2.0.3.1.1-230926_4635
2.1.1-230921_4631
2.0.1-230626
2.1.1-230725
2.0.3.1.1-230726
2.1.1-230424
2.0.3.1.1-230413
2.0.1-230412
2.1.0-230209
2.0.3.1.1-230127
2.0.1-230201
2.0.3.1.1-221121
2.0.1-220923
2.0.3.1.1-220923
2.0.3.1
2.0.3
2.0.2.1
2.0.2
2.0.1
2.0
Vulnerabilities (114)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139055 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-8646 |
CWE-444 | High | 2.2.1.1-260708, 2.3.3-260714 | 22.07.2026 |
SB2026072215 SB2026072219 SB2026072328 and 6 more |
||
| #VU139054 - Resource exhaustion CVE-2026-9320 |
CWE-400 | Medium | 2.2.1.1-260708, 2.3.3-260714 | 22.07.2026 |
SB2026072214 SB2026072219 SB2026072328 and 6 more |
||
| #VU138389 - Configuration CVE-2026-14971 |
CWE-16 | Low | 2.2.1.1-260708, 2.3.3-260714 | 20.07.2026 |
SB2026072005 |
||
| #VU137316 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-11806 |
CWE-444 | Medium | 2.2.1.1-260708, 2.3.3-260714 | 10.07.2026 |
SB2026071039 SB2026071040 SB2026071045 and 4 more |
||
| #VU137314 - Resource exhaustion CVE-2026-9071 |
CWE-400 | Low | 2.2.1.1-260708, 2.3.3-260714 | 10.07.2026 |
SB2026071036 SB2026071037 SB2026072219 and 7 more |
||
| #VU136794 - Resource exhaustion CVE-2026-9171 |
CWE-400 | Medium | 2.2.1.1-260708, 2.3.3-260714 | 02.07.2026 |
SB2026070280 SB2026070646 SB2026070880 and 9 more |
||
| #VU136790 - Resource exhaustion CVE-2026-9322 |
CWE-400 | Medium | 2.2.1.1-260708, 2.3.3-260714 | 02.07.2026 |
SB2026070280 SB2026070646 SB2026070880 and 9 more |
||
| #VU136712 - Resource exhaustion CVE-2026-50645 |
CWE-400 | Low | 2.2.1.1-260708, 2.3.3-260714 | 02.07.2026 |
SB2026070266 SB2026070280 SB2026070646 and 10 more |
||
| #VU136710 - Server-Side Request Forgery (SSRF) CVE-2026-11714 |
CWE-918 | Low | 2.2.1.1-260708, 2.3.3-260714 | 02.07.2026 |
SB2026070264 SB2026070820 SB2026070879 and 3 more |
||
| #VU136691 - Server-Side Request Forgery (SSRF) CVE-2026-11546 |
CWE-918 | Medium | 2.2.1.1-260708, 2.3.3-260714 | 02.07.2026 |
SB2026070237 SB2026070826 SB2026070881 and 3 more |
||
| #VU135124 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-11541 |
CWE-444 | High | 2.2.1.1-260708, 2.3.3-260714 | 24.06.2026 |
SB2026062445 SB2026062950 SB2026063026 and 14 more |
||
| #VU132041 - Resource exhaustion CVE-2026-4410 |
CWE-400 | Low | 2.2.1.1-260708, 2.3.3-260714 | 21.05.2026 |
SB2026052124 SB2026060911 SB2026060912 and 5 more |
||
| #VU132031 - Security Features CVE-2026-5516 |
CWE-254 | Low | 2.2.1.1-260708, 2.3.3-260714 | 21.05.2026 |
SB2026052115 SB20260626104 SB2026071327 and 3 more |
||
| #VU128402 - Improper Encoding or Escaping of Output CVE-2026-34480 |
CWE-116 | Medium | 2.2.1.1, 2.3.3 | 28.04.2026 |
SB20260428217 SB20260513128 SB2026052632 and 15 more |
||
| #VU128399 - Improper Certificate Validation CVE-2026-34477 |
CWE-295 | Medium | 2.2.1.1, 2.3.3 | 28.04.2026 |
SB20260428217 SB20260513128 SB2026052632 and 15 more |
||
| #VU126758 - Improper input validation CVE-2026-22016 |
CWE-20 | Medium | 2.2.1.1, 2.3.3 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 71 more |
||
| #VU126761 - Improper input validation CVE-2026-22021 |
CWE-20 | Medium | 2.2.1.1, 2.3.3 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 72 more |
||
| #VU126762 - Improper input validation CVE-2026-22013 |
CWE-20 | Medium | 2.2.1.1, 2.3.3 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 70 more |
||
| #VU126764 - Improper input validation CVE-2026-22018 |
CWE-20 | Low | 2.2.1.1, 2.3.3 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 70 more |
||
| #VU126766 - Improper input validation CVE-2026-34268 |
CWE-20 | Low | 2.2.1.1, 2.3.3 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 70 more |
Showing elements 1 - 20 out of 114