CVE-2026-16832
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service processor, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact.
Weakness
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service processor, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact.
Affected products
- ibm power_system_e1080_\(9080-hex\)_firmware
- ibm power_system_e1080_\(9080-hex\)
- ibm power_system_e1180_\(9080-heu\)_firmware
- ibm power_system_e1180_\(9080-heu\)
- ibm power_system_s922_\(9009-22g\)_firmware
- ibm power_system_s922_\(9009-22g\)
- ibm power_system_h922_\(9223-22s\)_firmware
- ibm power_system_h922_\(9223-22s\)
References
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.