CVE-2026-16835: IBM Power System E1180 (9080-heu) Firmware authentication bypass (CVSS 9.6)

Description

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in a confidentiality, integrity, and availability impact to the managed system.

CVSS 3.1 breakdown

Attack vectorAdjacent

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeChanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

IBM Power System E1080 (9080-hex) Firmware≥ fw1060.00 < fw1060.81

IBM Power System E1180 (9080-heu) Firmware≥ fw1110.00 < fw1110.31 · fw1120.00

IBM Power System E950 (9040-mr9) Firmware≥ fw950.00 < fw950.h3

IBM Power System E980 (9080-m9s) Firmware≥ fw950.00 < fw950.h3

IBM Power System H922 (9223-22s) Firmware≥ fw950.00 < fw950.h3

IBM Power System H924 (9223-42s) Firmware≥ fw950.00 < fw950.h3

IBM Power System S914 (9009-41g) Firmware≥ fw950.00 < fw950.h3

IBM Power System S922 (9009-22g) Firmware≥ fw950.00 < fw950.h3

IBM Power System S924 (9009-42g) Firmware≥ fw950.00 < fw950.h3

Remediation

Fixed in

IBM Power System E1080 (9080-hex) Firmware≥ fw1060.81

IBM Power System E1180 (9080-heu) Firmware≥ fw1110.31

IBM Power System E950 (9040-mr9) Firmware≥ fw950.h3

IBM Power System E980 (9080-m9s) Firmware≥ fw950.h3

IBM Power System H922 (9223-22s) Firmware≥ fw950.h3

IBM Power System H924 (9223-42s) Firmware≥ fw950.h3

IBM Power System S914 (9009-41g) Firmware≥ fw950.h3

IBM Power System S922 (9009-22g) Firmware≥ fw950.h3

IBM Power System S924 (9009-42g) Firmware≥ fw950.h3

Patch & vendor advisories

https://www.ibm.com/support/pages/node/7283894

References

https://www.ibm.com/support/pages/node/7283894Vendor Advisory

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2026-16835 being actively exploited?

CVE-2026-16835 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.36%.

How severe is CVE-2026-16835?

CVE-2026-16835 has a CVSS 3.1 base score of 9.6, rated critical. EPSS estimates a 0.36% probability of exploitation.

Which products are affected by CVE-2026-16835?

Affected products include IBM Power System E1080 (9080-hex) Firmware, IBM Power System E1180 (9080-heu) Firmware, IBM Power System E950 (9040-mr9) Firmware, IBM Power System E980 (9080-m9s) Firmware, IBM Power System H922 (9223-22s) Firmware, and 4 more.

How do I fix CVE-2026-16835?

Upgrade affected software to a fixed version, for example IBM Power System E1080 (9080-hex) Firmware fw1060.81, IBM Power System E1180 (9080-heu) Firmware fw1110.31, IBM Power System E950 (9040-mr9) Firmware fw950.h3 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-16835 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo