CVE-2026-96266

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1060.00 through FW1060.81

Description An issue exists in the host firmware configuration parsing. An attacker with authenticated service-level access to the Flexible Service Processor (FSP) can write specially crafted configuration data to cause memory corruption during the system Initial Program Load (IPL), which is the process of booting the computer. This compromises the host firmware boot stack and the hypervisor subsequently loaded by it, impacting the confidentiality, integrity, and availability of the managed system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.