Power System E1080 (9080-hex) Firmware vulnerabilities

21 known vulnerabilities in Power System E1080 (9080-hex) Firmware from IBM. 21 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Server Firmware: Out-of-bounds Read

  CVE-2026-93306Sep 25, 2026IBM

  IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can send a

• 7.3 High severity

  PowerVM Hypervisor: Stack-based Buffer Overflow

  CVE-2026-18871Aug 19, 2026IBM

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write special

• 8.8 High severity

  PowerVM Hypervisor: Out-of-bounds Write

  CVE-2026-18821Aug 19, 2026IBM

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same n

• 8.8 High severity

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80…

  CVE-2026-17414Aug 19, 2026IBM

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access t

• 8.4 High severity

  PowerVM Hypervisor: Integer Overflow or Wraparound

  CVE-2026-17091Aug 19, 2026IBM

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a spe

• 7.9 High severity

  Power Systems Firmware: Incorrect Authorization

  CVE-2026-17063Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can acces

• 8.2 High severity

  Power Systems Firmware: Integer Overflow or Wraparound

  CVE-2026-16933Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC) is affected by a vulnerability in the interface between the

• 8.2 High severity

  PowerVM Hypervisor: Out-of-bounds Read

  CVE-2026-16707Aug 19, 2026IBM

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP

• 8.2 High severity

  PowerVM Hypervisor: Integer Overflow or Wraparound

  CVE-2026-16661Aug 19, 2026IBM

  IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP

• 8.3 High severity

  Power Systems Firmware: Cross-Site Request Forgery

  CVE-2026-18848Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An attacker who can lure a logged-in ASMI administrator to visit a crafted w

• 8.1 High severity

  Power Systems Firmware: Incorrect Authorization

  CVE-2026-17429Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/F

• 8.2 High severity

  Power Systems Firmware: Out-of-bounds Write

  CVE-2026-17100Aug 19, 2026IBM

  Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affected by a vulnerability in the service processor mailbox interface. An attacker wit

• 8.2 High severity

  Power Systems Firmware: Stack-based Buffer Overflow

  CVE-2026-17093Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware configuration par

• 8.2 High severity

  Power Systems Firmware: Missing Authorization

  CVE-2026-16930Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execu

• 9.6 Critical severity

  Power Systems Firmware: Improper Certificate Validation

  CVE-2026-16835Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypas

• 8.4 High severity

  Power Systems Firmware: Stack-based Buffer Overflow

  CVE-2026-16832Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can exe

• 7.6 High severity

  Power Systems Firmware: Out-of-bounds Read

  CVE-2026-16828Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web

• 9.6 Critical severity

  Power Systems Firmware: Stack-based Buffer Overflow

  CVE-2026-16687Aug 19, 2026IBM

  IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed

• 8.2 High severity

  Power Systems Firmware: Stack-based Buffer Overflow

  CVE-2026-19234Aug 19, 2026IBM

  Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a malicio

• 8.4 High severity

  PowerVM Hypervisor: Buffer Copy without Checking Size of Input

  CVE-2026-11885Jul 30, 2026IBM

  IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity.

• 9.8 Critical severity

  Flexible Service Processor: Use of Hard-coded Credentials

  CVE-2024-45656Oct 29, 2024IBM

  IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges