CVE-2026-16661

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor version FW1120.00 IBM PowerVM Hypervisor versions FW1110.00 through FW1110.30 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.80 IBM PowerVM Hypervisor versions FW950.00 through FW950.H2

Description A flaw exists in the service processor mailbox interface. An attacker with authenticated service-level access to the Flexible Service Processor (FSP) can exploit this issue to execute arbitrary code within the host firmware runtime. This allows for full control over the managed system, impacting its confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.