CVE-2026-16938

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware version FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2

Description Insufficient access controls over privileged system configuration operations on the Flexible Service Processor (FSP) allow an authenticated attacker with administrator-level access to place the managed system into a non-production operational mode. This action enables the disabling of certain system components and persists across FSP resets, requiring manual operator intervention to clear the configuration and restore normal operation. This leads to an availability impact on the managed system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.