CVE-2026-14971
Low · 3.9CVSS
3.9
EPSS
0.1%
Published
Jul 17, 2026
CISA due date
—
The record
IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-4433 An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of… CWE-16
- CVE-2013-1451 Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same… CWE-16
- CVE-2011-2730 VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before… CWE-16
- CVE-2012-5613 MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other… CWE-16
- CVE-2012-0147 Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not… CWE-16
- CVE-2011-4404 The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware… CWE-16
- CVE-2011-1652 The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and… CWE-16
- CVE-2009-0696 The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5… CWE-16