CVE-2026-16682 · Infrastructure
NO FIX YET
IBM Power Systems firmware versions across several FW1120, FW1110, FW1060, OP940 and OP910 ranges mishandle uninitialized resources. A remote attacker can cause a denial of service on affected systems.
first public Nov 8, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running IBM Power Systems servers at the firmware ranges named in the description are exposed. The sources do not say which network services trigger the flaw or whether any configuration reduces exposure.
Not affected if unknown
Who cares firmware, ibm-power, power-systems
FW1110.31 or OP910.95)No fix yet, per the sources.
IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper handling of uninitialized resources.
This page as .md · .json · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.