What’s Vulnerable › Vulnerabilities

CVE-2026-16678: IBM Power Systems Firmware Denial of Service

• Severity: medium (CVSS 4.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-12 · updated 2026-10-13
• Weakness: CWE-772

Description

IBM Power Systems Firmware FW1110.00 through FW1110.31, FW1120.00 through FW1120.01, and FW1060.00 through FW1060.81 could allow a remote authenticated attacker to cause a denial of service by exhausting connection resources due to improper resource management.

Affected products

• IBM Virtualization Management Interface: from FW1110.00 through FW1110.31; from FW1120.00 through FW1120.01; from FW1060.00 through FW1060.81

References

• https://www.ibm.com/support/pages/node/7287270

Get alerted when CVE-2026-16678 or the next vulnerability affects your stack