VulDB 🛡@vuldb
⚠️ A severe vulnerability was disclosed for IBM Power Systems Firmware (CVE-2026-96265) vuldb.com/vuln/417268 https://t.co/XY7AH5jGGM
10020248
2.3K followersView on X
CVE-2026-96265
LOWCVSS 8.2 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory, compromising the host firmware boot stack and the hypervisor subsequently loaded by it. Successful exploitation results in a confidentiality, integrity, and availability impact to the managed system.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-119
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day