CVE-2026-16682mediumCWE-908

CVE-2026-16682: medium-severity vulnerability in IBM Hardware Management Console

This Power System update is being released to address

Published

Follow this CVE+ Monitor OPENBMC+ Monitor Hardware Management Console

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper handling of uninitialized resources.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
IBM · Hardware Management ConsoleIBM · OPENBMC
Related CVEs — IBM Hardware Management Console

In the same product, most dangerous first.

CVE-2021-38930MEDIUMCVE-2021-38930EPSS 1.5%CVE-2021-38929MEDIUMCVE-2021-38929EPSS 1.5%CVE-2021-38960MEDIUMCVE-2021-38960EPSS 1.1%CVE-2021-38961MEDIUMCVE-2021-38961EPSS 0.7%CVE-2026-18849MEDIUMIBM OpenBMC Code ExecutionEPSS 0.4%CVE-2026-7868MEDIUMThis Power System update is being released to address incorrect authorizationEPSS 0.4%