AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

IBMCVE-2026-16933

IBM Power Systems Firmware: integer overflow

IBM

CVE-2026-16933 · Published Aug 19, 2026 · updated Aug 25, 2026

High8.2
No fix yet
IBM advisory

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

Affected versions

PackageAffectedFixed in
Power Systems Firmware
Product
<= FW1120.00No fix yet
>= FW1110.00, <= FW1110.30No fix yet
>= FW1060.00, <= FW1060.80No fix yet
>= FW950.00, <= FW950.H2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-190

More IBM advisories

All IBM