CVE-2026-16933

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2 IBM Power Systems Firmware versions OP940.00 through OP940.a1 (Power9) IBM Power Systems Firmware versions OP940.00 through OP940.81 (Power HMC)

Description A flaw exists in the interface between the Baseboard Management Controller (BMC) or Field Programmable System Extension (FSP) and the host system. An attacker possessing root or service account access to the BMC/FSP can read and write arbitrary regions of the host system memory. This allows for complete control over the host system and all hosted partitions, impacting confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.