IBM Power Systems Firmware DoS via Uninit Resource (FW1060FW1120)
CVE-2026-16682 Published on November 8, 2026

This Power System update is being released to address
IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper handling of uninitialized resources.

Vendor Advisory NVD

Vulnerability Analysis

Attack Vector:

ADJACENT_NETWORK

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

NONE

Integrity Impact:

NONE

Availability Impact:

HIGH

Weakness Type

Use of Uninitialized Resource

The software uses or accesses a resource that has not been initialized. When a resource has not been properly initialized, the software may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the software.

Products Associated with CVE-2026-16682

stack.watch emails you whenever new vulnerabilities are published in IBM Openbmc or IBM Hardware Management Console. Just hit a watch button to start following.

IBM Openbmc

  Watch

IBM Hardware Management Console

  Watch

Affected Versions

• Version FW1120.00, <= FW1120.01 is affected.
• Version FW1110.00, <= FW1110.31 is affected.
• Version FW1060.00, <= FW1060.81 is affected.
• Version OP940.00, <= OP940.A2 is affected.
• Version OP910.00, <= OP910.95 is affected.

• Version OP940.00, <= OP940.82 is affected.