Vulnerability in IBM Power Systems Firmware Affects Multiple Versions

CVE-2026-16832

What is CVE-2026-16832?

A vulnerability exists in the IBM Power Systems Firmware affecting multiple versions, specifically through the FSP management network protocol. This issue allows an attacker with authenticated HMC administrator access to execute arbitrary code on the hardware service processor. This exploitation can grant an attacker complete control over the managed system, potentially leading to severe impacts on confidentiality, integrity, and availability of system resources. Users are encouraged to apply security patches as advised by IBM.

References