CVE Feed

    Dashboard / CVE / CVE-2026-16930

    CVE-2026-16930

    IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

    Published:Aug 19, 2026
    Last Modified:Aug 24, 2026
    EPS:Aug 19, 2026
    EPSS Score:0.00118
    CVSS Score:8.2

    Affected Products

    Vendor
    Ibm
    Product
    Power System E1050 \(9043-mrx\)
    Vendor
    Ibm
    Product
    Power System E1050 \(9043-mrx\) Firmware
    Vendor
    Ibm
    Product
    Power System E1080 \(9080-hex\)
    Vendor
    Ibm
    Product
    Power System E1080 \(9080-hex\) Firmware
    Vendor
    Ibm
    Product
    Power System E1150 \(9043-mru\)
    Vendor
    Ibm
    Product
    Power System E1150 \(9043-mru\) Firmware
    Vendor
    Ibm
    Product
    Power System E1180 \(9080-heu\)
    Vendor
    Ibm
    Product
    Power System E1180 \(9080-heu\) Firmware
    Vendor
    Ibm
    Product
    Power System L1022 \(9786-22h\)
    Vendor
    Ibm
    Product
    Power System L1022 \(9786-22h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1024 \(9786-42h\)
    Vendor
    Ibm
    Product
    Power System L1024 \(9786-42h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1122 \(9856-22h\)
    Vendor
    Ibm
    Product
    Power System L1122 \(9856-22h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1124 \(9856-42h\)
    Vendor
    Ibm
    Product
    Power System L1124 \(9856-42h\) Firmware
    Vendor
    Ibm
    Product
    Power System S1012 \(9028-21b\)
    Vendor
    Ibm
    Product
    Power System S1012 \(9028-21b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1014 \(9105-41b\)
    Vendor
    Ibm
    Product
    Power System S1014 \(9105-41b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1022 \(9105-22a\)
    Vendor
    Ibm
    Product
    Power System S1022 \(9105-22a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1022s \(9105-22b\)
    Vendor
    Ibm
    Product
    Power System S1022s \(9105-22b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1024 \(9105-42a\)
    Vendor
    Ibm
    Product
    Power System S1024 \(9105-42a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21b\)
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21t\)
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21t\) Firmware
    Vendor
    Ibm
    Product
    Power System S1114 \(9824-41b\)
    Vendor
    Ibm
    Product
    Power System S1114 \(9824-41b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1122 \(9824-22a\)
    Vendor
    Ibm
    Product
    Power System S1122 \(9824-22a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1122s \(9824-22b\)
    Vendor
    Ibm
    Product
    Power System S1122s \(9824-22b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1124 \(9824-42a\)
    Vendor
    Ibm
    Product
    Power System S1124 \(9824-42a\) Firmware
    Vendor
    Ibm
    Product
    Power Systems Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-862 Missing Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2026-18849 (CVSS 6.8) — IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An …
    CVE-2026-4936 (CVSS 5.1) — IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through …
    CVE-2026-4937 (CVSS 5.3) — IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2…
    CVE-2026-16707 (CVSS 8.2) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-17028 (CVSS 6.5) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-17091 (CVSS 8.4) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-17097 (CVSS 7.3) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-18821 (CVSS 7.5) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu…
    CVE-2026-16724 (CVSS 4.5) — IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.0…
    CVE-2026-18871 (CVSS 7.3) — IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High