CVE-2026-14514: Reliable Scalable Cluster Technology Denial-of-Service

Q: What access does an attacker need to exploit this issue?

The vulnerability is remotely exploitable over an adjacent network and requires no privileges or user interaction. An attacker would need to send a specially crafted request to a vulnerable RSCT 3.0 deployment.

Q: What is the expected impact if exploitation succeeds?

Successful exploitation can cause a denial of service. The supplied vector indicates no confidentiality or integrity impact.

Published Aug 18, 2026

Updated

IBM Reliable Scalable Cluster Technology (RSCT) 3.0 could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation.

Other sources

RSCT could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation.

— IBM

Affected Software

2 affected components

IBM Reliable Scalable Cluster Technology (RSCT)=3.0

IBM Reliable Scalable Cluster Technology (RSCT)<=3.x.x.x

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Reliable Scalable Cluster Technology (RSCT) 3.0 to a version that resolves this vulnerability.
Patch IJ5899008
Upgrade
Upgrade PowerVM VIOS to a version that resolves this vulnerability.
Fixed in 4.1.2.20
Upgrade
Upgrade PowerVM VIOS to a version that resolves this vulnerability.
Fixed in 4.1.1.30
Upgrade
Upgrade PowerVM VIOS to a version that resolves this vulnerability.
Fixed in 4.1.0.50

Event History

Aug 18, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Aug 19, 2026

CVE Published

via MITRE·09:02 PM

Data Sourced

via MITRE·09:02 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7283963

Frequently Asked Questions

What access does an attacker need to exploit this issue?