CVSS 9.6 (critical) · published 2026-08-19
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in a confidentiality, integrity, and availability impact to the managed system.
Affected products (NVD): ibm power_system_e1080_\(9080-hex\)_firmware, ibm power_system_e1180_\(9080-heu\)_firmware, ibm power_system_s922_\(9009-22g\)_firmware, ibm power_system_h922_\(9223-22s\)_firmware, ibm power_system_s914_\(9009-41g\)_firmware, ibm power_system_s924_\(9009-42g\)_firmware, ibm power_system_h924_\(9223-42s\)_firmware, ibm power_system_e950_\(9040-mr9\)_firmware, ibm power_system_e980_\(9080-m9s\)_firmware
Fixed in (NVD): fw1060.81, fw1110.31, fw950.h3
Weakness: CWE-295
Source: NVD CVE-2026-16835
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.