CVE-2026-14971

LOW

This PowerVM Novalink update is being released to address

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-14971 has a selected CVSS score of 3.9 (low).

Description

IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 20, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

PowerVM Novalink

Browse IBM / PowerVM Novalink
CVE List2.2.02.2.12.2.1.1affected
2.3.02.3.0.12.3.12.3.2affected

References

2