Threat Investigation
Request a demo

CVE-2026-16828

High

Description

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web server to crash with possible memory corruption and generate an error log; hosted partitions are not affected. The ASMI web interface will restart automatically; however, repeated exploitation could result in a sustained loss of access to the ASMI management interface, resulting in an integrity and availability impact.

SeverityHigh
CVSS7.6
Exploit probability—
ProductIbm Power System E1080 \(9080-hex\) Firmware
PublishedAug 19, 2026
First seenAug 19, 2026
Weakness typeCWE-125Out-of-bounds read

How to fix

Update
  • ibm power_system_e1080_\(9080-hex\)_firmwarefw1060.81 or later
  • ibm power_system_e1180_\(9080-heu\)_firmwarefw1110.31 or later
  • ibm power_system_s922_\(9009-22g\)_firmwarefw950.h3 or later
  • ibm power_system_h922_\(9223-22s\)_firmwarefw950.h3 or later
  • ibm power_system_s914_\(9009-41g\)_firmwarefw950.h3 or later
  • ibm power_system_s924_\(9009-42g\)_firmwarefw950.h3 or later
  • ibm power_system_h924_\(9223-42s\)_firmwarefw950.h3 or later
  • ibm power_system_e950_\(9040-mr9\)_firmwarefw950.h3 or later
  • ibm power_system_e980_\(9080-m9s\)_firmwarefw950.h3 or later
Patches

Affected products

ProductAffected versionsFixed in
ibm power_system_e1080_\(9080-hex\)_firmwarefw1060.00 ≤ v < fw1060.81fw1060.81
ibm power_system_e1180_\(9080-heu\)_firmwarefw1110.00 ≤ v < fw1110.31, fw1120.00fw1110.31
ibm power_system_s922_\(9009-22g\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_h922_\(9223-22s\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_s914_\(9009-41g\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_s924_\(9009-42g\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_h924_\(9223-42s\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_e950_\(9040-mr9\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_e980_\(9080-m9s\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.