IBM Power System l922 (9008-22l) Firmware vulnerabilities

3 CVEs affecting IBM Power System l922 (9008-22l) Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-11885, published 2026-07-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-45656, published 2024-10-29. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static…
CVE-2018-1992, published 2019-03-21. Medium severity, CVSS 6.4. EPSS: 0.4% chance of exploitation in the next 30 days. The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initial boot firmware image that drives the rest of the system's hardware…
CVE-2026-11885, published 2026-07-30. High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days. IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or…