← Back

CVE-2026-16835

nvd nist
Published: Aug 19, 2026Modified: Aug 25, 2026

JSON object

Loading...
9.6
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 6.0
Source: psirt@us.ibm.com (Secondary)

Description

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in a confidentiality, integrity, and availability impact to the managed system.

Affected (10)

9 products
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
From fw1060.00 to fw1060.81
Running on/withPlatform Versions
Ibm
Power System E1080 (9080 Hex)
All versions
Configuration B
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ibm
From fw1110.00 to fw1110.31
Version fw1120.00
Running on/withPlatform Versions
Ibm
Power System E1180 (9080 Heu)
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
From fw950.00 to fw950.h3
Running on/withPlatform Versions
Ibm
Power System S922 (9009 22g)
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
From fw950.00 to fw950.h3
Running on/withPlatform Versions
Ibm
Power System H922 (9223 22s)
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
From fw950.00 to fw950.h3
Running on/withPlatform Versions
Ibm
Power System S914 (9009 41g)
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
From fw950.00 to fw950.h3
Running on/withPlatform Versions
Ibm
Power System S924 (9009 42g)
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
From fw950.00 to fw950.h3
Running on/withPlatform Versions
Ibm
Power System H924 (9223 42s)
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
From fw950.00 to fw950.h3
Running on/withPlatform Versions
Ibm
Power System E950 (9040 Mr9)
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
From fw950.00 to fw950.h3
Running on/withPlatform Versions
Ibm
Power System E980 (9080 M9s)
All versions

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.