Buffer overflow in IBM Power System E1080 \(9080-Hex\) Firmware
CVE-2026-16832
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service processor, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.003 (22.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 22nd percentile — 22.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.003 · change: +0.001
Affected products
- IBM Power System E1080 \(9080-Hex\) Firmware
- IBM Power System E1180 \(9080-Heu\) Firmware — versions fw1120.00
- IBM Power System E950 \(9040-Mr9\) Firmware
- IBM Power System E980 \(9080-M9s\) Firmware
- IBM Power System H922 \(9223-22s\) Firmware
- IBM Power System H924 \(9223-42s\) Firmware
- IBM Power System S914 \(9009-41g\) Firmware
- IBM Power System S922 \(9009-22g\) Firmware
- IBM Power System S924 \(9009-42g\) Firmware
- IBM Power Systems Firmware — versions FW1120.00
Weakness classification (CWE)
References
- www.ibm.com/support/pages/node/7283895 (vendor-advisory, patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-16832?
- CVE-2026-16832 is a high-severity vulnerability in IBM Power System E1080 \(9080-Hex\) Firmware, classified under Stack-based Buffer Overflow. CVSS score: 8.4/10. Published 2026-08-19.
- How severe is CVE-2026-16832?
- High severity. CVSS v3 base score is 8.4 out of 10.