8.2

CVE-2026-16930

Power System Missing Authorization

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Power System E1180 (9080-heu) Firmware Version >= fw1110.00 < fw1110.31
   Ibm ≫ Power System E1180 (9080-heu) Version -
Ibm ≫ Power System S1122 (9824-22a) Firmware Version >= fw1110.00 < fw1110.31
   Ibm ≫ Power System S1122 (9824-22a) Version -
Ibm ≫ Power System S1124 (9824-42a) Firmware Version >= fw1110.00 < fw1110.31
   Ibm ≫ Power System S1124 (9824-42a) Version -
Ibm ≫ Power System S1122s (9824-22b) Firmware Version >= fw1110.00 < fw1110.31
   Ibm ≫ Power System S1122s (9824-22b) Version -
Ibm ≫ Power System S1114 (9824-41b) Firmware Version >= fw1110.00 < fw1110.31
   Ibm ≫ Power System S1114 (9824-41b) Version -
Ibm ≫ Power System L1122 (9856-22h) Firmware Version >= fw1110.00 < fw1110.31
   Ibm ≫ Power System L1122 (9856-22h) Version -
Ibm ≫ Power System L1124 (9856-42h) Firmware Version >= fw1110.00 < fw1110.31
   Ibm ≫ Power System L1124 (9856-42h) Version -
Ibm ≫ Power System E1150 (9043-mru) Firmware Version >= fw1110.00 < fw1110.31
   Ibm ≫ Power System E1150 (9043-mru) Version -
Ibm ≫ Power System E1080 (9080-hex) Firmware Version >= fw1060.00 < fw1060.81
Ibm ≫ Power System S1022 (9105-22a) Firmware Version >= fw1060.00 < fw1060.81
Ibm ≫ Power System S1024 (9105-42a) Firmware Version >= fw1060.00 < fw1060.81
Ibm ≫ Power System S1022s (9105-22b) Firmware Version >= fw1060.00 < fw1060.81
Ibm ≫ Power System S1014 (9105-41b) Firmware Version >= fw1060.00 < fw1060.81
Ibm ≫ Power System L1022 (9786-22h) Firmware Version >= fw1060.00 < fw1060.81
Ibm ≫ Power System L1024 (9786-42h) Firmware Version >= fw1060.00 < fw1060.81
Ibm ≫ Power System E1050 (9043-mrx) Firmware Version >= fw1060.00 < fw1060.81
Ibm ≫ Power System S1012 (9028-21b) Firmware Version >= fw1060.00 < fw1060.81
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.02
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
IBM 8.2 1.5 6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://www.ibm.com/support/pages/node/7283217
Vendor Advisory