CVE-2026-96264

Received Received - Intake

IBM Power Systems Firmware Code Execution via Mailbox Overflow

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: IBM Corporation

Description

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runtime attribute storage, allowing arbitrary code to be executed in the host firmware runtime. This gives the attacker full access to the managed system's memory and hardware interfaces, resulting in a confidentiality, integrity, and availability impact to the managed system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-96264

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	PowerVM	Hypervisor FW1060.00

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability affects IBM Power Systems Firmware versions FW1060.00 through FW1060.81. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runtime attribute storage. This allows arbitrary code execution in the host firmware runtime, giving the attacker full access to the managed system's memory and hardware interfaces.

Detection Guidance

Detection requires authenticated service-level access to the FSP. Monitor for unusual mailbox messages or firmware runtime attribute storage anomalies. Check FSP logs for unexpected mailbox interface activity or overflow conditions. No specific commands are provided in the context.

Impact Analysis

This vulnerability can lead to a confidentiality, integrity, and availability impact on the managed system. An attacker could gain full control over the system's hardware and memory, potentially leading to data breaches, system manipulation, or complete system compromise.

Compliance Impact

This vulnerability could lead to non-compliance with standards like GDPR or HIPAA due to potential data breaches and loss of system integrity. Unauthorized access to managed systems may result in unauthorized data exposure or manipulation, violating regulatory requirements for data protection and system security.

Mitigation Strategies

Apply the latest IBM Power Systems Firmware update to version FW1060.82 or higher. Restrict authenticated service-level access to the FSP to trusted personnel only. Monitor FSP logs for suspicious activity and isolate affected systems if compromise is suspected.

Hi! I’m here to help you understand CVE-2026-96264. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70