CVE-2026-96261: IBM Power Systems Firmware Buffer Overflow
Published Oct 12, 2026
·Updated
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory corruption during system initialisation, resulting in an integrity and availability impact to the managed system.
Affected Software
1 affected component
IBM Power Systems Firmware>=FW1060.00<=FW1060.81
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Power Systems Firmwareto a version that resolves this vulnerability.Fixed in FW1060.82(1060_199)
Event History
Oct 12, 2026
CVE Published
via MITRE·08:52 PM
Data Sourced
via MITRE·08:52 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness