Vulnerability details

CVE-2026-16697

IBM OPENBMCIBM Power Hardware Management Console

This Power System update is being released to address

CVSS 3.1

6.5Medium

Official description

IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources.

CVSS scores

Score	Version	Source	Vector
6.5Medium	3.1	CVEProject cvelistV5 (CNA) (ibm)	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

Affected products

Vendor	Product	Versions	Source
IBM	OPENBMC	FW1060.00 ≤ v ≤ FW1060.81	CVEProject cvelistV5 (CNA)
IBM	OPENBMC	OP910.00 ≤ v ≤ OP910.95	CVEProject cvelistV5 (CNA)
IBM	OPENBMC	OP940.00 ≤ v ≤ OP940.A2	CVEProject cvelistV5 (CNA)
IBM	Power Hardware Management Console	OP940.00 ≤ v ≤ OP940.82	CVEProject cvelistV5 (CNA)

References and advisories

https://www.ibm.com/support/pages/node/7294277 vendor-advisorypatch

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-11-08
Last updated: 2026-11-08
State: Published
Assigner (CNA): ibm

Exploit prediction (EPSS)

No EPSS score has been published for this CVE yet.

Weaknesses (CWE)

CWE-770
Allocation of Resources Without Limits or Throttling