IBM Power Systems FSP Firmware Authenticated Code Exec (FW1120.00FW950.H2)
CVE-2026-18681 Published on August 19, 2026
This Power System Buffer Overflow
IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.
Vulnerability Analysis
Weakness Type
What is a Stack Overflow Vulnerability?
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CVE-2026-18681 has been classified to as a Stack Overflow vulnerability or weakness.
Products Associated with CVE-2026-18681
Want to know whenever a new CVE is published for IBM Power Systems Firmware? stack.watch will email you.
Affected Versions
IBM Server Firmware:- Version FW1120.00 is affected.
- Version FW1110.00, <= FW1110.30 is affected.
- Version FW1060.00, <= FW1060.80 is affected.
- Version FW950.00, <= FW950.H2 is affected.