Unauthorized Access Vulnerability in IBM Power Systems Firmware

CVE-2026-16828

What is CVE-2026-16828?

A vulnerability exists in the ASMI web interface of IBM Power Systems Firmware that allows unauthenticated attackers on the management network to crash the ASMI web server. This situation may lead to potential memory corruption and the generation of error logs. Although hosted partitions remain unaffected, repeated exploitation could compromise access to the ASMI management interface, affecting both its integrity and availability. An automatic restart of the ASMI web interface may occur; however, sustained attacks could result in prolonged unavailability.

References