Security Bulletin: This Power System update is being released to address CVE-2026-16933

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hoste...

Security Bulletin: This Power System update is being released to address CVE-2026-17063

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can access and disrupt host processor state, potentially affecting the managed system and all hosted partitions,...

Security Bulletin: This Power System update is being released to address CVE-2026-17429

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can write arbitrary data to hardware control registers, allowing full control over the host system and all hosted...

Security Bulletin: This Power System update is being released to address CVE-2026-16930

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system, giving full control over the host system and all hosted partitions,...

CVE-2026-17063

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can access and disrupt host processor state,...

CVE-2026-16933

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 through OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker...

CVE-2026-17100

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access ...

CVE-2026-17429

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with...

CVE-2026-16930

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system,...

CVE-2026-16933 Power System Integer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 through OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker...

EUVD-2026-62697

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 through OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker...

CVE-2026-16933

IBM Power Systems firmware (CWE-190 integer overflow) in the BMC/FSP-host interface allows an attacker with root or service-account access to read/write arbitrary host memory, achieving full control of the host and all partitions (CVSS 8.2 HIGH). Remediation requires upgrading to specific firmwar...

EUVD-2026-62695

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can access and disrupt host processor state,...

CVE-2026-17063 Power System Incorrect Authorization

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can access and disrupt host processor state,...

EUVD-2026-62685

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with...

CVE-2026-17429

IBM Power Systems firmware (FW1120.00, FW1110.00-FW1110.30, FW1060.00-FW1060.80, FW950.00-FW950.H2, OP940.00-OP940.a1) has a CWE-863 incorrect authorization flaw in the BMC/FSP-host interface. A privileged BMC/FSP attacker can write arbitrary hardware control registers, gaining full host and part...

CVE-2026-16930

Power Systems Firmware versions FW1120.00, FW1110.00–.30, and FW1060.00–.80 are affected by CWE-862 (Missing Authorization), allowing a privileged BMC/FSP user to execute arbitrary code on the host and all partitions. Upgrade to FW1110.31, FW1120.01, or FW1060.81 (or newer) per the IBM Security B...

CVE-2026-16930 Power System Missing Authorization

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system,...

EUVD-2026-62684

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system,...

CVE-2026-17100

IBM Power Systems Firmware is affected by an out-of-bounds write (CWE-787) in the service processor mailbox interface . An attacker with authenticated service-level access to the BMC/FSP can exploit this to execute arbitrary code in the host firmware runtime , gaining full control over the manage...