CVE-2026-96261CWE-121

CVE-2026-96261

High · published October 13, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory corruption during system initialisation, resulting in an integrity and availability impact to the managed system.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00140 · 3.1th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-10-13T01:17Z
References (1)
EPSS history
Timeline
  • 14 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 12 OCT 20:52Z
    IBM Power Systems Firmware Buffer Overflow
    cvelistv5
  • 12 OCT 20:52Z
    IBM Power Systems Firmware Buffer Overflow
    cvelistv5