CVE-2026-16933

Received Received - Intake

Memory Access Vulnerability in IBM Power Systems Firmware

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: IBM Corporation

Description

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-19

Generated

2026-08-20

AI Q&A

2026-08-20

EPSS Evaluated

N/A

NVD

CVE-2026-16933

EUVD

EUVD-2026-62697

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	power_systems_firmware	1120.00
ibm	power_systems_firmware	From 1110.00 (inc) to 1110.30 (inc)
ibm	power_systems_firmware	From 1060.00 (inc) to 1060.80 (inc)
ibm	power_systems_firmware	From 950.00 (inc) to 950.H2 (inc)
ibm	power_systems_firmware	From 940.00 (inc) to 940.a1 (inc)
ibm	power_systems_firmware	From 940.00 (inc) to 940.81 (inc)
ibm	power_systems_firmware	fw1120.00
ibm	power_systems_firmware	From fw1110.00 (inc) to fw1110.30 (inc)
ibm	power_systems_firmware	From fw1060.00 (inc) to fw1060.80 (inc)
ibm	power_systems_firmware	From fw950.00 (inc) to fw950.h2 (inc)
ibm	power_systems_firmware	From op940.00 (inc) to op940.a1 (inc)
ibm	power_systems_firmware	From op940.00 (inc) to op940.81 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Executive Summary

This vulnerability affects IBM Power Systems Firmware versions FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC). An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, gaining full control over the host system and all hosted partitions.

Detection Guidance

Detection requires checking the firmware versions of IBM Power Systems. Use IBM tools or commands like 'lsmcode -r' on HMC or 'systemctl status' on affected systems to verify firmware versions against the affected ranges listed in the CVE.

Impact Analysis

This vulnerability allows an attacker to gain full control over the host system and all hosted partitions. This results in significant impacts on confidentiality (unauthorized data access), integrity (data tampering), and availability (system disruption).

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, which may violate compliance requirements under GDPR, HIPAA, and other regulations. Full system control by an attacker increases the risk of data breaches and non-compliance penalties.

Mitigation Strategies

Apply the latest firmware updates provided by IBM for your specific Power System model. Ensure no unauthorized access to BMC/FSP service accounts or root privileges. Monitor IBM's support page for updates and patches.

Hi! I’m here to help you understand CVE-2026-16933. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70