Details of VAR-202608-7537

ID

VAR-202608-7537

CVE

CVE-2026-16832

TITLE

IBM of IBM Power System E1080 (9080-HEX) Stack-based buffer overflow vulnerability in multiple products, including firmware

Trust: 0.8

sources: JVNDB: JVNDB-2026-030139

DESCRIPTION

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service processor, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact. This has serious implications for confidentiality, integrity, and availability.- All information handled by the software may be leaked to external parties. - All information handled by the software may be overwritten. - The software may completely shut down

Trust: 1.62

sources: NVD: CVE-2026-16832 // JVNDB: JVNDB-2026-030139

AFFECTED PRODUCTS

vendor:	ibm	model:	power system e980 \	scope:	gte	version:	fw950.00	Trust: 1.0
vendor:	ibm	model:	power system h922 \	scope:	lt	version:	fw950.h3	Trust: 1.0
vendor:	ibm	model:	power system e1080 \	scope:	lt	version:	fw1060.81	Trust: 1.0
vendor:	ibm	model:	power system e950 \	scope:	lt	version:	fw950.h3	Trust: 1.0
vendor:	ibm	model:	power system e1180 \	scope:	lt	version:	fw1110.31	Trust: 1.0
vendor:	ibm	model:	power system s924 \	scope:	gte	version:	fw950.00	Trust: 1.0
vendor:	ibm	model:	power system h924 \	scope:	lt	version:	fw950.h3	Trust: 1.0
vendor:	ibm	model:	power system e950 \	scope:	gte	version:	fw950.00	Trust: 1.0
vendor:	ibm	model:	power system h924 \	scope:	gte	version:	fw950.00	Trust: 1.0
vendor:	ibm	model:	power system e1180 \	scope:	gte	version:	fw1110.00	Trust: 1.0
vendor:	ibm	model:	power system h922 \	scope:	gte	version:	fw950.00	Trust: 1.0
vendor:	ibm	model:	power system e1180 \	scope:	eq	version:	fw1120.00	Trust: 1.0
vendor:	ibm	model:	power system e1080 \	scope:	gte	version:	fw1060.00	Trust: 1.0
vendor:	ibm	model:	power system s914 \	scope:	lt	version:	fw950.h3	Trust: 1.0
vendor:	ibm	model:	power system s922 \	scope:	lt	version:	fw950.h3	Trust: 1.0
vendor:	ibm	model:	power system e980 \	scope:	lt	version:	fw950.h3	Trust: 1.0
vendor:	ibm	model:	power system s914 \	scope:	gte	version:	fw950.00	Trust: 1.0
vendor:	ibm	model:	power system s924 \	scope:	lt	version:	fw950.h3	Trust: 1.0
vendor:	ibm	model:	power system s922 \	scope:	gte	version:	fw950.00	Trust: 1.0
vendor:	ibm	model:	power system e980	scope:	-	version:	-	Trust: 0.8
vendor:	ibm	model:	power system h924	scope:	-	version:	-	Trust: 0.8
vendor:	ibm	model:	power system e1180	scope:	-	version:	-	Trust: 0.8
vendor:	ibm	model:	power system s924	scope:	-	version:	-	Trust: 0.8
vendor:	ibm	model:	power system e1080	scope:	-	version:	-	Trust: 0.8
vendor:	ibm	model:	power system h922	scope:	-	version:	-	Trust: 0.8
vendor:	ibm	model:	power system s922	scope:	-	version:	-	Trust: 0.8
vendor:	ibm	model:	power system s914	scope:	-	version:	-	Trust: 0.8
vendor:	ibm	model:	power system e950	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2026-030139 // NVD: CVE-2026-16832

CVSS

SEVERITY

CVSSV2

CVSSV3

psirt@us.ibm.com:	CVE-2026-16832
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2026-030139
value:	HIGH
Trust: 0.8

psirt@us.ibm.com:	CVE-2026-16832
baseSeverity:	HIGH
baseScore:	8.4
vectorString:	CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.7
impactScore:	6.0
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2026-030139
baseSeverity:	HIGH
baseScore:	8.4
vectorString:	CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
attackVector:	ADJACENT NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2026-030139 // NVD: CVE-2026-16832

PROBLEMTYPE DATA

problemtype:	CWE-121	Trust: 1.0
problemtype:	Stack-based buffer overflow (CWE-121) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2026-030139 // NVD: CVE-2026-16832

PATCH

title:

Security Bulletin

url:

https://www.ibm.com/support/pages/node/7283895

Trust: 0.8

sources: JVNDB: JVNDB-2026-030139

EXTERNAL IDS

db:	NVD	id:	CVE-2026-16832	Trust: 2.6
db:	JVNDB	id:	JVNDB-2026-030139	Trust: 0.8

sources: JVNDB: JVNDB-2026-030139 // NVD: CVE-2026-16832

REFERENCES

url:	https://www.ibm.com/support/pages/node/7283895	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2026-16832	Trust: 0.8

sources: JVNDB: JVNDB-2026-030139 // NVD: CVE-2026-16832

SOURCES

db:	JVNDB	id:	JVNDB-2026-030139
db:	NVD	id:	CVE-2026-16832

LAST UPDATE DATE

2026-08-27T23:57:27.709000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2026-030139	date:	2026-08-26T07:14:00
db:	NVD	id:	CVE-2026-16832	date:	2026-08-25T18:04:01.390

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2026-030139	date:	2026-08-26T00:00:00
db:	NVD	id:	CVE-2026-16832	date:	2026-08-19T19:17:10.557