CVE-2026-16707

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor version FW1120.00 IBM PowerVM Hypervisor versions FW1110.00 through FW1110.30 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.80 IBM PowerVM Hypervisor versions FW950.00 through FW950.H2

Description A flaw exists in the service processor mailbox interface. An attacker with authenticated service-level access to the Flexible Service Processor (FSP) can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory. This action compromises the host firmware boot stack and the hypervisor loaded by it, impacting the confidentiality, integrity, and availability of the managed system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.