← CVE Intelligence

CVE-2026-16930

Power System Missing Authorization PUBLISHED

Description (CNA)

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

Affected (CNA)

Vendor / productVersions
IBM / Power Systems Firmwareaffected FW1120.00; affected FW1110.00 through FW1110.30; affected FW1060.00 through FW1060.80

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.