Skip to content
Sign in
8.2 High

CVE-2026-96266 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration…

Description

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause memory corruption in the host firmware boot stage during system IPL, compromising the host firmware boot stack and the hypervisor subsequently loaded by it. Successful exploitation results in a confidentiality, integrity, and availability impact to the managed system.

Affected products and versions

Product Affected versions Fixed in
PowerVM Hypervisor Versions not published

Other CVEs of PowerVM Hypervisor

The 43 CVEs of PowerVM Hypervisor →
CVE-2026-96261 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration… 7.3 High CVE-2026-96262 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox… 8.2 High CVE-2026-96263 IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81… 8.2 High CVE-2026-96264 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor… 8.2 High
Track this CVE