AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-16835

IBM Power Systems Firmware: authentication bypass

IBM

CVE-2026-16835 · Published Aug 19, 2026 · updated Aug 25, 2026

Critical9.6
No fix yet
IBM advisory

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in a confidentiality, integrity, and availability impact to the managed system.

Affected versions

PackageAffectedFixed in
Power Systems Firmware
Product
<= FW1120.00No fix yet
>= FW1110.00, <= FW1110.30No fix yet
>= FW1060.00, <= FW1060.80No fix yet
>= FW950.00, <= FW950.H2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-295

More IBM advisories

All IBM