CVE-2026-14971
LowCVSS 3.9Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A vulnerability in IBM PowerVM Novalink arises from API misconfiguration, which under non-default conditions may increase the attack surface and enable unintended or unauthorized operations.
Risk Assessment
The organization faces the risk of unauthorized API access and potential compromise of data integrity and confidentiality in the PowerVM environment.
Recommendation
It is recommended to immediately update IBM PowerVM Novalink to a patched version and review API configurations to eliminate deviations from default settings.
Original NVD description (English source)
IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions.