CVE-2026-14971

—

CVSS 3.1

7.0 high

EPSS

<1%p1

Published

Jul 17, 2026 (Jul 17, 2026)

Modified

Aug 11, 2026

Description

IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions.

Vendors: ibm
Products: powervm novalink
Weakness: CWE-16
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.