CVE-2026-96262: CWE-121 Stack-based Buffer Overflow in IBM PowerVM Hypervisor
Description
CVE-2026-96262 is a high-severity stack-based buffer overflow vulnerability in IBM Power Systems Firmware versions FW1060.00 through FW1060.81. It affects the service processor mailbox interface, allowing an attacker with authenticated service-level access to send crafted messages that overflow host firmware runtime attribute storage. Successful exploitation enables arbitrary code execution in the host firmware runtime, granting full access to the managed system's memory and hardware interfaces, impacting confidentiality, integrity, and availability.
CVSS v3.1
Score 8.2high
Affected software
IBM
PowerVM Hypervisor
cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00:*:*:*:*:*:*:*cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:powervm_hypervisor:fw1060.81:*:*:*:*:*:*:*cpe:2.3:a:ibm:powervm_hypervisor:fw1060.81.0:*:*:*:*:*:*:*Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-96262) exists in IBM Power Systems Firmware FW1060.00 through FW1060.81 within the service processor mailbox interface. An attacker with authenticated service-level access to the Flexible Service Processor (FSP) can send a specially crafted mailbox message that causes a stack-based buffer overflow in the host firmware runtime attribute storage. This overflow allows arbitrary code execution within the host firmware runtime environment, resulting in complete control over the managed system's memory and hardware interfaces. The vulnerability is classified as CWE-121 (stack-based buffer overflow) and has a CVSS v3.1 score of 8.2, indicating high severity with high impact on confidentiality, integrity, and availability.
Potential Impact
An attacker with authenticated service-level access to the FSP can execute arbitrary code in the host firmware runtime, leading to full compromise of the managed system's memory and hardware interfaces. This results in a critical impact on confidentiality, integrity, and availability of the affected system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict authenticated service-level access to trusted personnel only and monitor for suspicious activity related to the service processor mailbox interface.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- ibm
- Date Reserved
- 2026-09-22T20:13:41.870Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6acd4b482cdf04f656d3ef77
Added to database: 10/12/2026, 21:04:08 UTC
Last enriched: 10/12/2026, 21:18:35 UTC
Last updated: 10/12/2026, 21:19:03 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.