CVE-2026-16678

Received Received - Intake

IBM Power Systems Firmware Denial of Service

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: IBM Corporation

Description

IBM Power Systems Firmware FW1110.00 through FW1110.31, FW1120.00 through FW1120.01, and FW1060.00 through FW1060.81 could allow a remote authenticated attacker to cause a denial of service by exhausting connection resources due to improper resource management.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-16678

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Virtualization	Management Interface FW1110.00
IBM	Virtualization	Management Interface FW1120.00
IBM	Virtualization	Management Interface FW1060.00

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-772	The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

Attack-Flow Graph

Executive Summary

This vulnerability affects IBM Power Systems Firmware versions FW1110.00 through FW1110.31, FW1120.00 through FW1120.01, and FW1060.00 through FW1060.81. A remote authenticated attacker could exploit it to cause a denial of service by exhausting connection resources due to improper resource management.

Detection Guidance

This vulnerability involves resource exhaustion due to improper management in IBM Power Systems Firmware. Detection may require monitoring connection resources and system logs for unusual activity or service degradation.

Impact Analysis

The vulnerability allows an attacker to disrupt services by consuming all available connection resources, potentially making the system unavailable to legitimate users. This could lead to downtime and loss of access to critical functions.

Compliance Impact

This vulnerability causes a denial of service by exhausting connection resources, which could disrupt system availability. While not directly violating GDPR or HIPAA, such disruptions may impact compliance with requirements for data accessibility and system reliability.

Mitigation Strategies

Update IBM Power Systems Firmware to versions beyond FW1110.31, FW1120.01, and FW1060.81 to address improper resource management issues.

Hi! I’m here to help you understand CVE-2026-16678. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70