Web Interface Vulnerability in IBM Power Systems Firmware
CVE-2026-18848

8.3HIGH

Key Information:

Vendor

IBM
Status
Power Systems Firmware
Vendor
CVE Published:
19 August 2026

What is CVE-2026-18848?

The ASMI web interface of IBM Power Systems Firmware versions FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 contains a significant vulnerability that enables an attacker to exploit the interface. If an administrator is tricked into navigating to a specially designed webpage, the attacker may execute unauthorized administrative actions without the administrator's knowledge. This can lead to serious impacts on the confidentiality, integrity, and availability of the systems being managed. Proper caution and updates are recommended to mitigate this risk.

Affected Version(s)

Power Systems Firmware FW1120.00

Power Systems Firmware FW1110.00

Power Systems Firmware FW1060.00

References

https://www.ibm.com/support/pages/node/7283897
vendor-advisorypatch

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.