CVE-2026-16835

published 2026-08-19

CVE-2026-16835: IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in…

Priority P2 60 critical 9.6 CVSS 3.1

AV A AC L PR N UI N S C C H I H A H

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in a confidentiality, integrity, and availability impact to the managed system.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
ibm	power_system_e1080_firmware	>= fw1060.00 < fw1060.81	fw1060.81
ibm	power_system_e1180_firmware	—	—
ibm	power_system_e1180_firmware	>= fw1110.00 < fw1110.31	fw1110.31
ibm	power_system_e950_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_system_e980_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_system_h922_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_system_h924_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_system_s914_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_system_s922_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_system_s924_firmware	>= fw950.00 < fw950.h3	fw950.h3
ibm	power_systems_firmware	—	—
ibm	power_systems_firmware	FW1060.00 – FW1060.80	—
ibm	power_systems_firmware	FW1110.00 – FW1110.30	—
ibm	power_systems_firmware	FW950.00 – FW950.H2	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-295