CVE-2026-17426

IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception...

CVE-2026-16682

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper handling of uninitialize...

CVE-2026-17427

IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length...

CVE-2026-17427

IBM Power Systems and OPENBMC software are vulnerable to a denial of service (DoS) attack due to improper validation of input length (CWE-617). Specifically, the BMC's HTTPS service allows unauthenticated remote attackers to crash the service. Affected versions include OPENBMC FW1060.00 through F...

EUVD-2026-119745

IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length...

CVE-2026-17426

IBM Power Systems running OPENBMC firmware versions FW1060.00 through FW1060.81 are vulnerable to a denial of service (DoS) via an unhandled exception (CWE-248). This flaw allows a remote, unauthenticated attacker to crash the BMC's HTTPS service . Affected products include various IBM Power Syst...

EUVD-2026-119744

IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception...

EUVD-2026-119743

IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources...

CVE-2026-16697

The BMC's HTTPS service in OPENBMC and IBM Power Hardware Management Console is vulnerable to a denial of service (DoS) due to improper restriction of excessive computational resources (CWE-770 ). A remote attacker could crash the BMC by exploiting this resource exhaustion. Affected versions incl...

CVE-2026-16682

IBM Power Systems firmware is vulnerable to a denial of service (DoS) condition due to the improper handling of uninitialized resources (CWE-908) within the BMC's IPMI/RMCP+ network interface. This flaw allows an unauthenticated network attacker to crash the BMC's IPMI service, potentially causin...

EUVD-2026-119742

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper handling of uninitialize...

PT-2026-140153

IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length...

PT-2026-140152

IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception...

PT-2026-140150

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper handling of uninitialize...

PT-2026-140151

IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources...

Security Bulletin: This Power System update is being released to address CVE-2026-16682

Summary The BMC's IPMI/RMCP+ network interface allows an unauthenticated network attacker to crash the BMC's IPMI service, which may result in the BMC going to a quiesced state, resulting in denial of service. Vulnerability Details CVEID:CVE-2026-16682 DESCRIPTION: IBM Power Systems Firmware coul...

CVE-2026-96266

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause memory corruption in the host firmware boot stage...

CVE-2026-96265

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory,...

CVE-2026-96264

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runtime attribute storage, allowi...

CVE-2026-96263

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted co...