critical9.6
CVE-2026-16835
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in…
Impact
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in a confidentiality, integrity, and availability impact to the managed system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Power System E1080 \(9080-Hex\) Firmware | from fw1060.00 before fw1060.81 |
| Ibm | Power System E1180 \(9080-Heu\) Firmware | from fw1110.00 before fw1110.31 Version fw1120.00 |
| Ibm | Power System S922 \(9009-22g\) Firmware | from fw950.00 before fw950.h3 |
| Ibm | Power System H922 \(9223-22s\) Firmware | from fw950.00 before fw950.h3 |
| Ibm | Power System S914 \(9009-41g\) Firmware | from fw950.00 before fw950.h3 |
| Ibm | Power System S924 \(9009-42g\) Firmware | from fw950.00 before fw950.h3 |
| Ibm | Power System H924 \(9223-42s\) Firmware | from fw950.00 before fw950.h3 |
| Ibm | Power System E950 \(9040-Mr9\) Firmware | from fw950.00 before fw950.h3 |
| Ibm | Power System E980 \(9080-M9s\) Firmware | from fw950.00 before fw950.h3 |