PT-2026-78565 · Ibm · Power Systems Firmware

CVE-2026-16930

·

Published

2026-08-19

·

Updated

2026-08-25

CVSS v3.1

8.2

High

VectorAV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80
Description An issue exists in the interface between the Baseboard Management Controller (BMC) or Field Programmable System Extension (FSP) and the host system. An attacker with root or service account access to the BMC/FSP can execute arbitrary code on the host system. This allows for full control over the host and all hosted partitions, impacting confidentiality, integrity, and availability.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-16930

Affected Products

Power Systems Firmware