CVE-2026-93306
Awaiting Analysis
Awaiting Analysis - Queue
Denial of Service in IBM Server Firmware
Vulnerability report for CVE-2026-93306, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-25
Last updated on: 2026-09-25
Assigner: IBM Corporation
Description
Description
IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can send a malformed HTTPS request to ASMI, causing the web server to crash with possible memory corruption and generate an error log. The ASMI web interface will restart automatically; however, repeated exploitation could result in a sustained loss of access to the ASMI management interface, resulting in an integrity and availability impact.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ibm | server_firmware | From FW1120.00 (inc) to FW1120.01 (inc) |
| ibm | server_firmware | From FW1110.00 (inc) to FW1110.31 (inc) |
| ibm | server_firmware | From FW1060.00 (inc) to FW1060.81 (inc) |
| ibm | server_firmware | From FW950.00 (inc) to FW950.H3 (inc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
