CVE-2026-16938

🗓️ 19 Aug 2026 18:48:32Reported by ibmType

IBM Server Firmware FSP missing authorization lets authenticated admins disable system components, causing persistent availability impact.

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2026-16938 Power System Missing Authorization	19 Aug 202618:48	–	cvelist
EUVD	EUVD-2026-62689	19 Aug 202618:48	–	euvd
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE-2026-16938	15 Aug 202617:22	–	ibm
NVD	CVE-2026-16938	19 Aug 202619:17	–	nvd
Positive Technologies	PT-2026-78566	19 Aug 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-16938: Missing Authorization	19 Aug 202600:00	–	rapid7

NVD

Vulners

Node

AND

ibm power_system_e1080_(9080-hex)_firmwareRangefw1060.00–fw1060.81

ibm power_system_e1080_(9080-hex)Match-

Node

AND

ibm power_system_e1180_(9080-heu)_firmwareRangefw1110.00–fw1110.31

ibm power_system_e1180_(9080-heu)_firmwareMatchfw1120.00

ibm power_system_e1180_(9080-heu)Match-

Node

AND

ibm power_system_s922_(9009-22g)_firmwareRangefw950.00–fw950.h3

ibm power_system_s922_(9009-22g)Match-

Node

AND

ibm power_system_h922_(9223-22s)_firmwareRangefw950.00–fw950.h3

ibm power_system_h922_(9223-22s)Match-

Node

AND

ibm power_system_s914_(9009-41g)_firmwareRangefw950.00–fw950.h3

ibm power_system_s914_(9009-41g)Match-

Node

AND

ibm power_system_s924_(9009-42g)_firmwareRangefw950.00–fw950.h3

ibm power_system_s924_(9009-42g)Match-

Node

AND

ibm power_system_h924_(9223-42s)_firmwareRangefw950.00–fw950.h3

ibm power_system_h924_(9223-42s)Match-

Node

AND

ibm power_system_e950_(9040-mr9)_firmwareRangefw950.00–fw950.h3

ibm power_system_e950_(9040-mr9)Match-

Node

AND

ibm power_system_e980_(9080-m9s)_firmwareRangefw950.00–fw950.h3

ibm power_system_e980_(9080-m9s)Match-

[
  {
    "vendor": "IBM",
    "product": "Power Systems Firmware",
    "versions": [
      {
        "status": "affected",
        "version": "FW1120.00"
      },
      {
        "status": "affected",
        "version": "FW1110.00",
        "lessThanOrEqual": "FW1110.30",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "FW1060.00",
        "lessThanOrEqual": "FW1060.80",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "FW950.00",
        "lessThanOrEqual": "FW950.H2",
        "versionType": "semver"
      }
    ],
    "cpes": [
      "cpe:2.3:o:ibm:power_systems_firmware:fw1120.00:*:*:*:*:*:*:*",
      "cpe:2.3:o:ibm:power_systems_firmware:fw1110.00:*:*:*:*:*:*:*",
      "cpe:2.3:o:ibm:power_systems_firmware:fw1110.30:*:*:*:*:*:*:*",
      "cpe:2.3:o:ibm:power_systems_firmware:fw1060.00:*:*:*:*:*:*:*",
      "cpe:2.3:o:ibm:power_systems_firmware:fw1060.80:*:*:*:*:*:*:*",
      "cpe:2.3:o:ibm:power_systems_firmware:fw950.00:*:*:*:*:*:*:*",
      "cpe:2.3:o:ibm:power_systems_firmware:fw950.h2:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7283896

25 Aug 2026 15:56Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.16.9

EPSS0.00225

CWE-862