CVE-2026-16835: falha crítica em IBM Power Systems Firmware
Power System Improper Certificate Validation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.6epss 0.4%
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in a confidentiality, integrity, and availability impact to the managed system.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
IBM · Power Systems FirmwareCVEs relacionadas — IBM Power Systems Firmware
No mesmo produto, das mais perigosas para as menos.
CVE-2026-16687CRITICALPower System Buffer OverflowEPSS 0.3%CVE-2026-16832HIGHPower System Buffer OverflowEPSS 0.3%CVE-2026-16828HIGHPower System Out-of-bounds ReadEPSS 0.3%CVE-2026-16938MEDIUMPower System Missing AuthorizationEPSS 0.2%CVE-2026-16930HIGHPower System Missing AuthorizationEPSS 0.2%CVE-2026-16933HIGHPower System Integer OverflowEPSS 0.2%