38163 matches found
CVE-2026-17063
IBM Power Systems Firmware (FW1120.00, FW1110.00–FW1110.30, FW1060.00–FW1060.80) contains an incorrect authorization flaw (CWE-863) in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can access and disrupt host processor state,...
CVE-2026-16835
CVE-2026-16835 is a CRITICAL (CVSS 9.6) vulnerability in the FSP management network protocol of IBM Power Systems Firmware, caused by improper certificate validation (CWE-295). An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation...
CVE-2026-16835 Power System Improper Certificate Validation
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any...
CVE-2026-16938
IBM Power Systems Firmware (FSP) is affected by a missing authorization flaw (CWE-862) in access controls over privileged system configuration operations. An attacker with authenticated administrator-level access to the FSP can place the managed system into a non-production operational mode , dis...
CVE-2026-16938 Power System Missing Authorization
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in access controls over privileged system configuration operations on the FSP. An attacker with authenticated administrator-level access to...
EUVD-2026-62689
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in access controls over privileged system configuration operations on the FSP. An attacker with authenticated administrator-level access to...
CVE-2026-18848
The IBM Power Systems ASMI web interface has a CSRF flaw (CWE-352): an attacker can lure a logged-in ASMI admin to a crafted page to silently execute administrative actions on the FSP, affecting confidentiality, integrity, and availability. IBM provides no workarounds; customers must upgrade to F...
CVE-2026-16828
IBM Power Systems Firmware is affected by an out-of-bounds read (CWE-125) in the ASMI web interface . An unauthenticated attacker on the adjacent management network can crash the ASMI web server with possible memory corruption. Hosted partitions are not affected. The ASMI interface restarts autom...
EUVD-2026-62687
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web server to crash with possible memory...
CVE-2026-17494
CVE-2026-17494 is a stack-based buffer overflow (CWE-121) in the interface between the BMC and host system of IBM Power Systems Firmware. Affected versions are FW1120.00 and FW1110.00 through FW1110.30 . An attacker with service access to the BMC can send a specially crafted command to achieve ar...
EUVD-2026-62686
IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system,...
CVE-2026-18681
CVE-2026-18681 is a stack-based buffer overflow (CWE-121) in the FSP firmware update process of IBM Power Systems Server Firmware. An attacker with authenticated administrator-level access to the FSP over an adjacent network can execute arbitrary code, leading to full compromise of confidentialit...
CVE-2026-19321
IBM Power Firmware is vulnerable due to CWE-190: Integer Overflow or Wraparound in host firmware. An attacker with service-processor access can craft commands to leak inaccessible hardware registers, causing limited confidentiality and high availability impact (CVSS 6.7). Affected versions includ...
CVE-2026-19321 Power System Integer Overflow
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers th...
ROOT-OS-UBUNTU-2404-CVE-2025-40192 CVE-2025-40192 in linux - Patched by Root
Root has patched CVE-2025-40192 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-38063 CVE-2025-38063 in linux - Patched by Root
Root has patched CVE-2025-38063 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-53270 CVE-2026-53270 in linux - Patched by Root
Root has patched CVE-2026-53270 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-43165 CVE-2026-43165 in linux - Patched by Root
Root has patched CVE-2026-43165 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...