Vulnerability details
CVE-2026-16682
IBM Hardware Management ConsoleIBM OPENBMC
This Power System update is being released to address
CVSS 3.1
6.5Medium
Official description
IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper handling of uninitialized resources.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 6.5Medium | 3.1 | CVEProject cvelistV5 (CNA) (ibm) | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| IBM | Hardware Management Console | OP940.00 ≤ v ≤ OP940.82 | CVEProject cvelistV5 (CNA) |
| IBM | OPENBMC | FW1060.00 ≤ v ≤ FW1060.81 | CVEProject cvelistV5 (CNA) |
| IBM | OPENBMC | FW1110.00 ≤ v ≤ FW1110.31 | CVEProject cvelistV5 (CNA) |
| IBM | OPENBMC | FW1120.00 ≤ v ≤ FW1120.01 | CVEProject cvelistV5 (CNA) |
| IBM | OPENBMC | OP910.00 ≤ v ≤ OP910.95 | CVEProject cvelistV5 (CNA) |
| IBM | OPENBMC | OP940.00 ≤ v ≤ OP940.A2 | CVEProject cvelistV5 (CNA) |
References and advisories
1- https://www.ibm.com/support/pages/node/7294279 vendor-advisorypatch
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-11-08
- Last updated
- 2026-11-08
- State
- Published
- Assigner (CNA)
- ibm
Exploit prediction (EPSS)
No EPSS score has been published for this CVE yet.
Weaknesses (CWE)
- CWE-908Use of Uninitialized Resource