CVE-2026-16832

published 2026-08-19

CVE-2026-16832: IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in…

Priority P3 48 high 8.4 CVSS 3.1

AV A AC L PR H UI N S C C H I H A H

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service processor, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
ibm	power_system_e1080_firmware	>= fw1060.00 < fw1060.81	fw1060.81
ibm	power_system_e1180_firmware	—	—
ibm	power_system_e1180_firmware	>= fw1110.00 < fw1110.31	fw1110.31
ibm	power_system_e950_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_system_e980_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_system_h922_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_system_h924_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_system_s914_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_system_s922_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_system_s924_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_systems_firmware	—	—
ibm	power_systems_firmware	FW1060.00 – FW1060.80	—
ibm	power_systems_firmware	FW1110.00 – FW1110.30	—
ibm	power_systems_firmware	FW950.00 – FW950.H2	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-121