IBM Power Systems FW1060.0081 Config Parsing Crash/Memory Corruption
CVE-2026-96261 Published on October 12, 2026
IBM Power Systems Firmware Buffer Overflow
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory corruption during system initialisation, resulting in an integrity and availability impact to the managed system.
Vulnerability Analysis
CVE-2026-96261 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and a high impact on availability.
Weakness Type
What is a Stack Overflow Vulnerability?
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CVE-2026-96261 has been classified to as a Stack Overflow vulnerability or weakness.
Products Associated with CVE-2026-96261
Want to know whenever a new CVE is published for IBM Powervm Hypervisor? stack.watch will email you.
Affected Versions
IBM PowerVM Hypervisor:- Version FW1060.00, <= FW1060.81 is affected.