IBM Power Systems Firmware FW1060.00-81 DoS (CVE-2026-16697)
CVE-2026-16697 Published on November 8, 2026

This Power System update is being released to address
IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and  OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources.

Vendor Advisory NVD

Vulnerability Analysis

Attack Vector:

ADJACENT_NETWORK

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

NONE

Integrity Impact:

NONE

Availability Impact:

HIGH

Weakness Type

Allocation of Resources Without Limits or Throttling

The software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

Products Associated with CVE-2026-16697

stack.watch emails you whenever new vulnerabilities are published in IBM Openbmc or IBM Power Hardware Management Console. Just hit a watch button to start following.

IBM Openbmc

  Watch

IBM Power Hardware Management Console

  Watch

Affected Versions

• Version FW1060.00, <= FW1060.81 is affected.
• Version OP940.00, <= OP940.A2 is affected.
• Version OP910.00, <= OP910.95 is affected.

• Version OP940.00, <= OP940.82 is affected.