CVE-2026-96263CWE-121

CVE-2026-96263

High · published October 13, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful exploitation could result in a confidentiality, integrity, and availability impact to the affected host system.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00169 · 5.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-10-13T01:17Z
References (1)
EPSS history
Timeline
  • 14 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 12 OCT 20:52Z
    IBM Power Systems Firmware Buffer Overflow
    cvelistv5
  • 12 OCT 20:52Z
    IBM Power Systems Firmware Buffer Overflow
    cvelistv5