CVE-2026-96263: IBM Power Systems Firmware Buffer Overflow

Severity: high (CVSS 8.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-12 · updated 2026-10-13
Weakness: CWE-121

Description

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful exploitation could result in a confidentiality, integrity, and availability impact to the affected host system.

Affected products

IBM PowerVM Hypervisor: from FW1120.00 through FW1120.01; from FW1110.00 through FW1110.31; from FW1060.00 through FW1060.81

References

https://www.ibm.com/support/pages/node/7290129

Get alerted when CVE-2026-96263 or the next vulnerability affects your stack