CVE-2026-14971

IBM PowerVM NovaLink versions 2.2.02.2.12.2.1.1 and 2.3.02.3.0.12.3.12.3.2 are vulnerable due to a misconfiguration in their APIs, which can potentially expand the attack surface and allow unauthorized operations in non-default settings. Organizations using these specific versions should prioritize remediation to mitigate the risk of unintended access or actions within their environments, despite the low severity rating.