Vulnerability-Lookup

CVE-2026-18681 (GCVE-0-2026-18681)

Vulnerability from cvelistv5 – Published: 2026-08-19 18:36 – Updated: 2026-08-19 19:59

Title

This Power System Buffer Overflow

Summary

IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.

Severity

6.8 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-19 19:20 UTC

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

ibm mitre root

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7283899	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version	CPE status
IBM	Server Firmware	Affected: FW1120.00 Affected: FW1110.00 , ≤ FW1110.30 (semver) Affected: FW1060.00 , ≤ FW1060.80 (semver) Affected: FW950.00 , ≤ FW950.H2 (semver) cpe:2.3:o:ibm:power_systems_firmware:fw1120.00:::::::* cpe:2.3:o:ibm:power_systems_firmware:fw1110.00:::::::* cpe:2.3:o:ibm:power_systems_firmware:fw1110.30:::::::* cpe:2.3:o:ibm:power_systems_firmware:fw1060.00:::::::* cpe:2.3:o:ibm:power_systems_firmware:fw1060.80:::::::* cpe:2.3:o:ibm:power_systems_firmware:fw950.00:::::::* cpe:2.3:o:ibm:power_systems_firmware:fw950.h2:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-18681",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-19T19:20:47.264675Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-19T19:59:43.874Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:ibm:power_systems_firmware:fw1120.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw1110.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw1110.30:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw1060.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw1060.80:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw950.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw950.h2:*:*:*:*:*:*:*"
          ],
          "product": "Server Firmware",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "FW1120.00"
            },
            {
              "lessThanOrEqual": "FW1110.30",
              "status": "affected",
              "version": "FW1110.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW1060.80",
              "status": "affected",
              "version": "FW1060.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW950.H2",
              "status": "affected",
              "version": "FW950.00",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.\u003c/p\u003e"
            }
          ],
          "value": "IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121 Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T18:36:15.970Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7283899"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCustomers with the products below should install FW1120.01(1120_167), FW1110.31(1110_134) or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003ePower 11\u003cbr/\u003e1) IBM Power System E1180 (9080-HEU)\u003c/p\u003e\u003cp\u003eCustomers with the products below should install FW1060.81(1060_184) or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003ePower 10\u003cbr/\u003e1) IBM Power System E1080 (9080-HEX)\u003c/p\u003e\u003cp\u003eCustomers with the products below should install FW950.H3(950_230) or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003ePower 9\u003cbr/\u003e1) IBM Power System S922 (9009-22G)\u003cbr/\u003e2) IBM Power System H922 (9223-22S)\u003cbr/\u003e3) IBM Power System S914 (9009-41G)\u003cbr/\u003e4) IBM Power System S924 (9009-42G)\u003cbr/\u003e5) IBM Power System H924 (9223-42S)\u003cbr/\u003e6) IBM Power System E950 (9040-MR9)\u003cbr/\u003e7) IBM Power System E980 (9080-M9S)\u003c/p\u003e\u003cp\u003eThe images mentioned above can be located at IBM Fix Central : \u003ca href=\"https://www.ibm.com/support/fixcentral/\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "Customers with the products below should install FW1120.01(1120_167), FW1110.31(1110_134) or newer to remediate this vulnerability.\n\n\n\nPower 11\n1) IBM Power System E1180 (9080-HEU)\n\n\n\nCustomers with the products below should install FW1060.81(1060_184) or newer to remediate this vulnerability.\n\n\n\nPower 10\n1) IBM Power System E1080 (9080-HEX)\n\n\n\nCustomers with the products below should install FW950.H3(950_230) or newer to remediate this vulnerability.\n\n\n\nPower 9\n1) IBM Power System S922 (9009-22G)\n2) IBM Power System H922 (9223-22S)\n3) IBM Power System S914 (9009-41G)\n4) IBM Power System S924 (9009-42G)\n5) IBM Power System H924 (9223-42S)\n6) IBM Power System E950 (9040-MR9)\n7) IBM Power System E980 (9080-M9S)\n\n\n\nThe images mentioned above can be located at IBM Fix Central :  https://www.ibm.com/support/fixcentral/"
        }
      ],
      "title": "This Power System Buffer Overflow",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eProtect administrator access to the FSP.\u00a0 Install firmware images only from trusted sources.\u00a0 Validate the firmware image\u0027s integrity as described in the firmware \"Release Notes\" section \"Firmware Information and Description\" before installing it.\u003c/p\u003e"
            }
          ],
          "value": "Protect administrator access to the FSP.\u00a0 Install firmware images only from trusted sources.\u00a0 Validate the firmware image\u0027s integrity as described in the firmware \"Release Notes\" section \"Firmware Information and Description\" before installing it."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-18681",
    "datePublished": "2026-08-19T18:36:15.970Z",
    "dateReserved": "2026-08-03T15:34:34.383Z",
    "dateUpdated": "2026-08-19T19:59:43.874Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-18681",
      "date": "2026-08-26",
      "epss": "0.00201",
      "percentile": "0.09872"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-18681\",\"sourceIdentifier\":\"psirt@us.ibm.com\",\"published\":\"2026-08-19T19:17:12.110\",\"lastModified\":\"2026-08-25T20:21:00.900\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.\"}],\"affected\":[{\"source\":\"psirt@us.ibm.com\",\"affectedData\":[{\"vendor\":\"IBM\",\"product\":\"Server Firmware\",\"cpes\":[\"cpe:2.3:o:ibm:power_systems_firmware:fw1120.00:*:*:*:*:*:*:*\",\"cpe:2.3:o:ibm:power_systems_firmware:fw1110.00:*:*:*:*:*:*:*\",\"cpe:2.3:o:ibm:power_systems_firmware:fw1110.30:*:*:*:*:*:*:*\",\"cpe:2.3:o:ibm:power_systems_firmware:fw1060.00:*:*:*:*:*:*:*\",\"cpe:2.3:o:ibm:power_systems_firmware:fw1060.80:*:*:*:*:*:*:*\",\"cpe:2.3:o:ibm:power_systems_firmware:fw950.00:*:*:*:*:*:*:*\",\"cpe:2.3:o:ibm:power_systems_firmware:fw950.h2:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"FW1120.00\",\"status\":\"affected\"},{\"version\":\"FW1110.00\",\"lessThanOrEqual\":\"FW1110.30\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"FW1060.00\",\"lessThanOrEqual\":\"FW1060.80\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"FW950.00\",\"lessThanOrEqual\":\"FW950.H2\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":6.8,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":0.9,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-19T19:20:47.264675Z\",\"id\":\"CVE-2026-18681\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-121\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s922_\\\\(9009-22g\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"0C406C5A-454C-4454-861F-80E629B68418\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s922_\\\\(9009-22g\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95E5E77F-A5BB-46E7-B6B6-B02F242DE829\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_h922_\\\\(9223-22s\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"FBE7D8B3-902D-4CD1-9F31-454E293A79B3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_h922_\\\\(9223-22s\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7851003-8D6B-4FE8-87D7-BE968E85E448\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s914_\\\\(9009-41g\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"CD77C09F-AF62-4CD8-B64C-CDF50D696648\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s914_\\\\(9009-41g\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"003F591A-ACCD-497E-BF8A-DE090321D778\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s924_\\\\(9009-42g\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"54831AF9-D748-4649-A0ED-896341845BCD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s924_\\\\(9009-42g\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4038C5DB-DF9C-4661-9590-F6A0CD4D15D5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_h924_\\\\(9223-42s\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"64FD3222-EEFD-4533-A088-B05F04E0831D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_h924_\\\\(9223-42s\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2F0E93A-26F0-4914-8A31-3C86E64D5B8A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e950_\\\\(9040-mr9\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"C99CF91B-A98D-4795-A8AE-998713989ABE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_e950_\\\\(9040-mr9\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FF58E5C-0A54-4F2F-A426-0BFD1EACE991\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e980_\\\\(9080-m9s\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"272B1267-28AC-4BDB-93C4-9804DBE240E0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_e980_\\\\(9080-m9s\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BE56BD8-DB0F-4151-9428-42F1B6452D99\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e1080_\\\\(9080-hex\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1060.00\",\"versionEndExcluding\":\"fw1060.81\",\"matchCriteriaId\":\"AA6D803F-DD5C-49A7-BE93-68981C124C69\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_e1080_\\\\(9080-hex\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF85251B-E02C-4293-98F0-D331BF51CAC4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e1180_\\\\(9080-heu\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1110.00\",\"versionEndExcluding\":\"fw1110.31\",\"matchCriteriaId\":\"E8049F52-227B-4CCA-B059-5821F9B41C95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e1180_\\\\(9080-heu\\\\)_firmware:fw1120.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F518B3DD-3F25-4581-9103-6CD4D8DA54C7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_e1180_\\\\(9080-heu\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8BD4FC49-8120-4D4B-906A-1B6FA6B30FA2\"}]}]}],\"references\":[{\"url\":\"https://www.ibm.com/support/pages/node/7283899\",\"source\":\"psirt@us.ibm.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"cna\": {\"providerMetadata\": {\"orgId\": \"9a959283-ebb5-44b6-b705-dcc2bbced522\", \"shortName\": \"ibm\", \"dateUpdated\": \"2026-08-19T18:36:15.970Z\"}, \"title\": \"This Power System Buffer Overflow\", \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"cweId\": \"CWE-121\", \"description\": \"CWE-121 Stack-based Buffer Overflow\", \"type\": \"CWE\"}]}], \"affected\": [{\"vendor\": \"IBM\", \"product\": \"Server Firmware\", \"versions\": [{\"status\": \"affected\", \"version\": \"FW1120.00\"}, {\"status\": \"affected\", \"version\": \"FW1110.00\", \"lessThanOrEqual\": \"FW1110.30\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"FW1060.00\", \"lessThanOrEqual\": \"FW1060.80\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"FW950.00\", \"lessThanOrEqual\": \"FW950.H2\", \"versionType\": \"semver\"}], \"cpes\": [\"cpe:2.3:o:ibm:power_systems_firmware:fw1120.00:*:*:*:*:*:*:*\", \"cpe:2.3:o:ibm:power_systems_firmware:fw1110.00:*:*:*:*:*:*:*\", \"cpe:2.3:o:ibm:power_systems_firmware:fw1110.30:*:*:*:*:*:*:*\", \"cpe:2.3:o:ibm:power_systems_firmware:fw1060.00:*:*:*:*:*:*:*\", \"cpe:2.3:o:ibm:power_systems_firmware:fw1060.80:*:*:*:*:*:*:*\", \"cpe:2.3:o:ibm:power_systems_firmware:fw950.00:*:*:*:*:*:*:*\", \"cpe:2.3:o:ibm:power_systems_firmware:fw950.h2:*:*:*:*:*:*:*\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"\u003cp\u003eIBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.\u003c/p\u003e\"}]}], \"references\": [{\"url\": \"https://www.ibm.com/support/pages/node/7283899\", \"tags\": [\"vendor-advisory\", \"patch\"]}], \"metrics\": [{\"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}], \"cvssV3_1\": {\"version\": \"3.1\", \"attackVector\": \"ADJACENT_NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"baseSeverity\": \"MEDIUM\", \"baseScore\": 6.8, \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\"}}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Protect administrator access to the FSP.\\u00a0 Install firmware images only from trusted sources.\\u00a0 Validate the firmware image\u0027s integrity as described in the firmware \\\"Release Notes\\\" section \\\"Firmware Information and Description\\\" before installing it.\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"\u003cp\u003eProtect administrator access to the FSP.\\u00a0 Install firmware images only from trusted sources.\\u00a0 Validate the firmware image\u0027s integrity as described in the firmware \\\"Release Notes\\\" section \\\"Firmware Information and Description\\\" before installing it.\u003c/p\u003e\"}]}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Customers with the products below should install FW1120.01(1120_167), FW1110.31(1110_134) or newer to remediate this vulnerability.\\n\\n\\n\\nPower 11\\n1) IBM Power System E1180 (9080-HEU)\\n\\n\\n\\nCustomers with the products below should install FW1060.81(1060_184) or newer to remediate this vulnerability.\\n\\n\\n\\nPower 10\\n1) IBM Power System E1080 (9080-HEX)\\n\\n\\n\\nCustomers with the products below should install FW950.H3(950_230) or newer to remediate this vulnerability.\\n\\n\\n\\nPower 9\\n1) IBM Power System S922 (9009-22G)\\n2) IBM Power System H922 (9223-22S)\\n3) IBM Power System S914 (9009-41G)\\n4) IBM Power System S924 (9009-42G)\\n5) IBM Power System H924 (9223-42S)\\n6) IBM Power System E950 (9040-MR9)\\n7) IBM Power System E980 (9080-M9S)\\n\\n\\n\\nThe images mentioned above can be located at IBM Fix Central :  https://www.ibm.com/support/fixcentral/\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"\u003cp\u003eCustomers with the products below should install FW1120.01(1120_167), FW1110.31(1110_134) or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003ePower 11\u003cbr/\u003e1) IBM Power System E1180 (9080-HEU)\u003c/p\u003e\u003cp\u003eCustomers with the products below should install FW1060.81(1060_184) or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003ePower 10\u003cbr/\u003e1) IBM Power System E1080 (9080-HEX)\u003c/p\u003e\u003cp\u003eCustomers with the products below should install FW950.H3(950_230) or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003ePower 9\u003cbr/\u003e1) IBM Power System S922 (9009-22G)\u003cbr/\u003e2) IBM Power System H922 (9223-22S)\u003cbr/\u003e3) IBM Power System S914 (9009-41G)\u003cbr/\u003e4) IBM Power System S924 (9009-42G)\u003cbr/\u003e5) IBM Power System H924 (9223-42S)\u003cbr/\u003e6) IBM Power System E950 (9040-MR9)\u003cbr/\u003e7) IBM Power System E980 (9080-M9S)\u003c/p\u003e\u003cp\u003eThe images mentioned above can be located at IBM Fix Central : \u003ca href=\\\"https://www.ibm.com/support/fixcentral/\\\" rel=\\\"nofollow\\\"\u003ehttps://www.ibm.com/support/fixcentral/\u003c/a\u003e\u003c/p\u003e\"}]}]}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-18681\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-19T19:20:47.264675Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-19T19:20:53.634Z\"}}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-18681\", \"assignerOrgId\": \"9a959283-ebb5-44b6-b705-dcc2bbced522\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"ibm\", \"dateReserved\": \"2026-08-03T15:34:34.383Z\", \"datePublished\": \"2026-08-19T18:36:15.970Z\", \"dateUpdated\": \"2026-08-19T19:59:43.874Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-18681

Vulnerability from fkie_nvd - Published: 2026-08-19 19:17 - Updated: 2026-08-25 20:21

Severity

6.8 (Medium) - CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	psirt@us.ibm.com	https://www.ibm.com/support/pages/node/7283899	Vendor Advisory

Impacted products

Vendor	Product	Version
ibm	power_system_s922_\(9009-22g\)_firmware	*
ibm	power_system_s922_\(9009-22g\)	-
ibm	power_system_h922_\(9223-22s\)_firmware	*
ibm	power_system_h922_\(9223-22s\)	-
ibm	power_system_s914_\(9009-41g\)_firmware	*
ibm	power_system_s914_\(9009-41g\)	-
ibm	power_system_s924_\(9009-42g\)_firmware	*
ibm	power_system_s924_\(9009-42g\)	-
ibm	power_system_h924_\(9223-42s\)_firmware	*
ibm	power_system_h924_\(9223-42s\)	-
ibm	power_system_e950_\(9040-mr9\)_firmware	*
ibm	power_system_e950_\(9040-mr9\)	-
ibm	power_system_e980_\(9080-m9s\)_firmware	*
ibm	power_system_e980_\(9080-m9s\)	-
ibm	power_system_e1080_\(9080-hex\)_firmware	*
ibm	power_system_e1080_\(9080-hex\)	-
ibm	power_system_e1180_\(9080-heu\)_firmware	*
ibm	power_system_e1180_\(9080-heu\)_firmware	fw1120.00
ibm	power_system_e1180_\(9080-heu\)	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:ibm:power_systems_firmware:fw1120.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw1110.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw1110.30:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw1060.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw1060.80:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw950.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw950.h2:*:*:*:*:*:*:*"
          ],
          "product": "Server Firmware",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "FW1120.00"
            },
            {
              "lessThanOrEqual": "FW1110.30",
              "status": "affected",
              "version": "FW1110.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW1060.80",
              "status": "affected",
              "version": "FW1060.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW950.H2",
              "status": "affected",
              "version": "FW950.00",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s922_\\(9009-22g\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C406C5A-454C-4454-861F-80E629B68418",
              "versionEndExcluding": "fw950.h3",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s922_\\(9009-22g\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "95E5E77F-A5BB-46E7-B6B6-B02F242DE829",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_h922_\\(9223-22s\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBE7D8B3-902D-4CD1-9F31-454E293A79B3",
              "versionEndExcluding": "fw950.h3",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_h922_\\(9223-22s\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E7851003-8D6B-4FE8-87D7-BE968E85E448",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s914_\\(9009-41g\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD77C09F-AF62-4CD8-B64C-CDF50D696648",
              "versionEndExcluding": "fw950.h3",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s914_\\(9009-41g\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "003F591A-ACCD-497E-BF8A-DE090321D778",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s924_\\(9009-42g\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "54831AF9-D748-4649-A0ED-896341845BCD",
              "versionEndExcluding": "fw950.h3",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s924_\\(9009-42g\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4038C5DB-DF9C-4661-9590-F6A0CD4D15D5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_h924_\\(9223-42s\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "64FD3222-EEFD-4533-A088-B05F04E0831D",
              "versionEndExcluding": "fw950.h3",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_h924_\\(9223-42s\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2F0E93A-26F0-4914-8A31-3C86E64D5B8A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e950_\\(9040-mr9\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C99CF91B-A98D-4795-A8AE-998713989ABE",
              "versionEndExcluding": "fw950.h3",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e950_\\(9040-mr9\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FF58E5C-0A54-4F2F-A426-0BFD1EACE991",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e980_\\(9080-m9s\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "272B1267-28AC-4BDB-93C4-9804DBE240E0",
              "versionEndExcluding": "fw950.h3",
              "versionStartIncluding": "fw950.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e980_\\(9080-m9s\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BE56BD8-DB0F-4151-9428-42F1B6452D99",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e1080_\\(9080-hex\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA6D803F-DD5C-49A7-BE93-68981C124C69",
              "versionEndExcluding": "fw1060.81",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e1080_\\(9080-hex\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF85251B-E02C-4293-98F0-D331BF51CAC4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e1180_\\(9080-heu\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8049F52-227B-4CCA-B059-5821F9B41C95",
              "versionEndExcluding": "fw1110.31",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e1180_\\(9080-heu\\)_firmware:fw1120.00:*:*:*:*:*:*:*",
              "matchCriteriaId": "F518B3DD-3F25-4581-9103-6CD4D8DA54C7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e1180_\\(9080-heu\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BD4FC49-8120-4D4B-906A-1B6FA6B30FA2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact."
    }
  ],
  "id": "CVE-2026-18681",
  "lastModified": "2026-08-25T20:21:00.900",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 6.8,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.9,
        "impactScore": 5.9,
        "source": "psirt@us.ibm.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-18681",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-08-19T19:20:47.264675Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-08-19T19:17:12.110",
  "references": [
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.ibm.com/support/pages/node/7283899"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-121"
        }
      ],
      "source": "psirt@us.ibm.com",
      "type": "Secondary"
    }
  ]
}

GHSA-29HJ-6FFG-89RH

Vulnerability from github – Published: 2026-08-19 21:30 – Updated: 2026-08-19 21:30

Details

Severity

6.8 (Medium)


                  
                    CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-18681"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-121"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-19T19:17:12Z",
    "severity": "MODERATE"
  },
  "details": "IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.",
  "id": "GHSA-29hj-6ffg-89rh",
  "modified": "2026-08-19T21:30:32Z",
  "published": "2026-08-19T21:30:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18681"
    },
    {
      "type": "WEB",
      "url": "https://www.ibm.com/support/pages/node/7283899"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-18681 (GCVE-0-2026-18681)

FKIE_CVE-2026-18681

GHSA-29HJ-6FFG-89RH

Tags

Sightings

Nomenclature