CVE-2026-16687: falha crítica em IBM Power Systems Firmware
Power System Buffer Overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.6epss 0.3%
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code execution, giving the attacker full control over the managed system, resulting in a confidentiality, integrity, and availability impact.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
IBM · Power Systems FirmwareCVEs relacionadas — IBM Power Systems Firmware
No mesmo produto, das mais perigosas para as menos.
CVE-2026-16835CRITICALPower System Improper Certificate ValidationEPSS 0.4%CVE-2026-16832HIGHPower System Buffer OverflowEPSS 0.3%CVE-2026-16828HIGHPower System Out-of-bounds ReadEPSS 0.3%CVE-2026-16938MEDIUMPower System Missing AuthorizationEPSS 0.2%CVE-2026-16930HIGHPower System Missing AuthorizationEPSS 0.2%CVE-2026-16933HIGHPower System Integer OverflowEPSS 0.2%