CVE-2026-16724
Received
Received - Intake
Virtualization Management Interface Denial of Service
Vulnerability report for CVE-2026-16724, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-08-19
Last updated on: 2026-08-19
Assigner: IBM Corporation
Description
Description
IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface (VMI). An attacker with authenticated administrator-level access can cause the VMI to crash. The VMI will restart automatically; however, repeated exploitation could result in a sustained availability impact.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ibm | virtualization_management_interface | From FW1110.00 (inc) to FW1110.30 (inc) |
| ibm | virtualization_management_interface | FW1120.00 |
| ibm | virtualization_management_interface | From FW1060.00 (inc) to FW1060.80 (inc) |
| ibm | virtualization_management_interface | From FW1120.00 (inc) to FW1120.01 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-190 | The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number. |
