Skip to content
OpenAdvisories
Critical · 9.6 CVE-2026-16835 EUVD-2026-62691GHSA-2mjm-m8vh-843x

Power System Improper Certificate Validation

Published Aug 19, 2026 · Updated Aug 22, 2026 · Assigned by ibm

Description

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in a confidentiality, integrity, and availability impact to the managed system.

Affected products

VendorProductAffectedFixed
IBM Power Systems Firmware FW1120.00, FW1110.00 – ≤ FW1110.30, FW1060.00 – ≤ FW1060.80, FW950.00 – ≤ FW950.H2 —

References