CVE-2026-16697: This Power System update is being released to address

Q: Which systems are affected?

Affected IBM Power Systems Firmware ranges are FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82. The issue also applies to OPENBMC.

Q: What does an attacker need to exploit this issue?

The vulnerability is remotely exploitable, has low attack complexity, and requires no privileges or user interaction. Exploitation can cause a denial of service by consuming excessive computational resources.

Q: What is the expected impact of successful exploitation?

Successful exploitation affects availability only. The provided scoring indicates no confidentiality or integrity impact.

Published Oct 28, 2026

Updated

IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources.

Other sources

OPENBMC could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources.

— IBM

Affected Software

4 affected components

IBM OPENBMC<=FW1060.00 - FW1060.81

IBM OPENBMC<=OP940.00 - OP940.A2

IBM OPENBMC<=OP910.00 - OP910.95

IBM Power Hardware Management Console<=OP940.00 - OP940.82

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in FW1060.82Patch 1060_199
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in OP940.83
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in OP940.A3
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in OP910.96

Event History

Oct 28, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 8, 2026

CVE Published

via MITRE·07:15 PM

Data Sourced

via MITRE·07:15 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7294277

Frequently Asked Questions

Which systems are affected?

Affected IBM Power Systems Firmware ranges are FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82. The issue also applies to OPENBMC.

What does an attacker need to exploit this issue?

The vulnerability is remotely exploitable, has low attack complexity, and requires no privileges or user interaction. Exploitation can cause a denial of service by consuming excessive computational resources.

What is the expected impact of successful exploitation?

Successful exploitation affects availability only. The provided scoring indicates no confidentiality or integrity impact.

CVE-2026-16697: This Power System update is being released to address

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Which systems are affected?

What does an attacker need to exploit this issue?

What is the expected impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which systems are affected?

What does an attacker need to exploit this issue?

What is the expected impact of successful exploitation?