CVE-2026-16835

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware version FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2

Description A flaw exists in the FSP management network protocol. An unauthenticated attacker with access to the management network can bypass authentication to execute administrative operations on the managed system. This includes controlling partition power states, modifying configurations, and gaining console access across all hosted partitions, which impacts the confidentiality, integrity, and availability of the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.