CVE-2026-96265

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1060.00 through FW1060.81

Description A flaw exists in the service processor mailbox interface. An authenticated attacker with service-level access to the Flexible Service Processor (FSP) can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory. This action compromises the host firmware boot stack and the hypervisor loaded by it, impacting the confidentiality, integrity, and availability of the managed system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.