CVE-2026-16724 describes an integer overflow or wraparound vulnerability in IBM Virtualization Management Interface firmware versions FW1110.00 through FW1110.30, FW1120.00, and FW1060.00 through FW1060.80. This vulnerability allows an attacker with authenticated administrator privileges to cause the Virtualization Management Interface (VMI) to crash. Although the VMI restarts automatically, repeated exploitation could result in a sustained denial of service due to availability degradation. The CVSS 3.1 base score is 4.5, reflecting a medium severity with attack vector requiring adjacent network access, low attack complexity, high privileges, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability.

The vulnerability enables an authenticated administrator to crash the VMI, causing temporary service disruption. While the system restarts automatically, repeated crashes can lead to sustained availability issues, potentially impacting virtualization management operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time.