CVE-2026-18681

Analyzed Analyzed - Analysis Complete

IBM Server Firmware FSP Arbitrary Code Execution

Publication date: 2026-08-19

Last updated on: 2026-08-25

Assigner: IBM Corporation

Description

IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-25

Generated

2026-09-09

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-18681

EUVD

EUVD-2026-62683

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	power_system_s922_(9009-22g)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_h922_(9223-22s)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_s914_(9009-41g)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_s924_(9009-42g)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_h924_(9223-42s)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_e950_(9040-mr9)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_e980_(9080-m9s)_firmware	From fw950.00 (inc) to fw950.h3 (exc)
ibm	power_system_e1080_(9080-hex)_firmware	From fw1060.00 (inc) to fw1060.81 (exc)
ibm	power_system_e1180_(9080-heu)_firmware	From fw1110.00 (inc) to fw1110.31 (exc)
ibm	power_system_e1180_(9080-heu)_firmware	fw1120.00

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

CVE-2026-18681 is a stack-based buffer overflow vulnerability in the FSP firmware update process of IBM Power Systems Firmware. It allows an attacker with authenticated administrator-level access to the FSP to execute arbitrary code under specific conditions, potentially impacting confidentiality, integrity, and availability.

Detection Guidance

Detecting this vulnerability requires checking the firmware version of IBM Power Systems. Compare your current firmware version against the affected versions listed: FW1120.00, FW1110.00-FW1110.30, FW1060.00-FW1060.80, and FW950.00-FW950.H2. Use the FSP management interface or IBM tools to verify the firmware version.

Impact Analysis

This vulnerability can lead to arbitrary code execution by an attacker with admin access, resulting in potential data breaches, system manipulation, or service disruption. It may cause loss of confidentiality, integrity, and availability of the affected IBM Power Systems.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations must mitigate this risk to maintain compliance with data protection and security standards.

Mitigation Strategies

Immediately update the firmware to the latest patched versions: FW1120.01(1120_167) or newer for Power 11 systems, FW1060.81(1060_184) or newer for Power 10 systems, and FW950.H3(950_230) or newer for Power 9 systems. Ensure administrator access to the FSP is restricted and firmware is only installed from trusted sources.

Hi! I’m here to help you understand CVE-2026-18681. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70