Denial of Service Vulnerability in IBM Power Systems Firmware
CVE-2026-16697

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Openbmc
Power Hardware Management Console
Vendor
CVE Published:
8 November 2026

What is CVE-2026-16697?

Certain versions of IBM Power Systems Firmware, including FW1060.00 to FW1060.81, OP940.00 to OP940.A2, and OP910.00 to OP910.95, possess a vulnerability that may allow a remote attacker to exploit the system through improper restrictions on computational resource usage, potentially leading to a denial of service. This issue highlights the importance of ensuring that adequate measures are in place to manage resource allocation effectively, to prevent disruption of services.

Affected Version(s)

OPENBMC FW1060.00

OPENBMC OP940.00

OPENBMC OP910.00

References

https://www.ibm.com/support/pages/node/7294277
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.