Threat database

IBM Power Systems Firmware versions FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 contain a vulnerability in the FSP management network protocol. This flaw allows an unauthenticated attacker on the management network to bypass authentication and perform any administrative operation on the managed system. The attacker can control partition power state, configuration, and console access across all hosted partitions, impacting confidentiality, integrity, and availability.

A stack-based buffer overflow vulnerability (CWE-121) exists in IBM Power Systems Firmware versions FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2. This flaw affects the FSP management network protocol and allows an attacker with authenticated HMC administrator access to execute arbitrary code on the service processor. Successful exploitation can lead to full control over the managed system, impacting confidentiality, integrity, and availability.

CVE-2026-16938 is a missing authorization vulnerability in IBM Power Systems Firmware affecting multiple firmware versions. An attacker with authenticated administrator-level access to the Flexible Service Processor (FSP) can place the managed system into a non-production mode, disabling certain system components. This state persists across FSP resets and requires manual operator intervention to restore normal operation. The vulnerability impacts system availability but does not affect confidentiality or integrity.

CVE-2026-18848 is a high-severity Cross-Site Request Forgery (CSRF) vulnerability affecting IBM Power Systems Firmware ASMI web interface. An attacker can trick a logged-in ASMI administrator into visiting a malicious web page, which may cause unauthorized administrative actions on the FSP. This can impact confidentiality, integrity, and availability of the managed system.

CVE-2026-16828 is an out-of-bounds read vulnerability (CWE-125) in the ASMI web interface of IBM Power Systems Firmware versions FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2. An unauthenticated attacker on the management network can cause the ASMI web server to crash, potentially causing memory corruption and generating error logs. The ASMI web interface restarts automatically, but repeated exploitation may lead to sustained loss of access to the ASMI management interface, impacting system integrity and availability. Hosted partitions are not affected by this vulnerability.

A stack-based buffer overflow vulnerability exists in IBM Power Systems Firmware versions FW1120.00 and FW1110.00 through FW1110.30. This flaw resides in the interface between the Baseboard Management Controller (BMC) and the host system. An attacker with service access to the BMC can exploit this vulnerability by sending a specially crafted command, resulting in arbitrary code execution on the host system. Successful exploitation grants full control over the host and all hosted partitions, impacting confidentiality, integrity, and availability.

IBM Power Systems Firmware versions including FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC) contain an authorization vulnerability. This flaw exists in the interface between the Baseboard Management Controller (BMC)/Flexible Service Processor (FSP) and the host system. An attacker with service account or root access to the BMC/FSP can exploit this to write arbitrary data to hardware control registers, gaining full control over the host system and all hosted partitions. The vulnerability impacts confidentiality, integrity, and availability of the affected systems. The CVSS v3.1 score is 8.1, indicating high severity. No patch or remediation information is provided in the available data.

IBM Power Systems Firmware versions FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 contain a missing authorization vulnerability in the interface between the BMC/FSP and the host system. An attacker with service or root access to the BMC/FSP can execute arbitrary code on the host, gaining full control over the host and all hosted partitions. This results in a high-impact compromise of confidentiality, integrity, and availability.

IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.

A stack-based buffer overflow vulnerability exists in IBM Power Systems Firmware versions FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC). This flaw allows an attacker with service-level access to the BMC/FSP to supply specially crafted configuration data that compromises the host firmware boot stage and all subsequent code execution, impacting confidentiality, integrity, and availability of the managed system.

CVE-2026-17100 is a high-severity out-of-bounds write vulnerability in IBM Power Systems Firmware affecting multiple firmware versions. It allows an attacker with authenticated service-level access to the BMC/FSP service processor mailbox interface to execute arbitrary code in the host firmware runtime. This leads to full control over the managed system, impacting confidentiality, integrity, and availability.

CVE-2026-19321 is an integer overflow or wraparound vulnerability (CWE-190) in IBM Power Systems Firmware versions FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80. An attacker with service access to the service processor can send a crafted command to leak contents of hardware registers that should be inaccessible. This could lead to limited confidentiality loss and availability impact on the affected host system. The vulnerability has a CVSS 3.1 score of 6.7, indicating a medium severity. No known exploits are reported in the wild, and no patch information is provided in the available data.

A stack-based buffer overflow vulnerability (CWE-121) exists in IBM Power Systems Firmware versions FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80. The flaw occurs in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, potentially leading to arbitrary code execution on the host system. This can impact confidentiality, integrity, and availability of the affected system.

CVE-2026-19653 is a vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1, where improper handling of memory page table configurations can lead to uncontrolled resource consumption. This flaw allows a local attacker to cause a denial of service by exhausting system resources. The vulnerability has a medium severity rating with a CVSS score of 6.5. There is no indication of known exploits in the wild or available patches at this time.

IBM Langflow OSS versions 1.0.0 through 1.10.0 contain a vulnerability due to missing authentication on the registration endpoint. This flaw allows a remote attacker to overwrite administrator email information and misuse the server as an outbound relay. The vulnerability has a high severity rating with a CVSS score of 7.5.

CVE-2026-16819 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a time-of-check to time-of-use (TOCTOU) race condition that could allow a local attacker to cause denial of service and compromise data integrity.

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.

CVE-2026-16816 is a critical OS command injection vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It allows a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements in OS commands. The vulnerability has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-16814 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a heap buffer overflow that could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges. The vulnerability is classified under CWE-787 (Out-of-bounds Write).