CVE-2026-16697 · Infrastructure
NO FIX YET
IBM Power Systems firmware versions FW1060, OP940 and OP910 fail to restrict excessive computational resource use. A remote attacker can trigger a denial of service, taking the affected system offline.
first public Nov 8, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running IBM Power Systems servers with the listed firmware levels are exposed to remote denial of service. Systems on firmware outside the listed ranges are not named as affected. The sources do not describe required network position or configuration.
Not affected if unknown
Who cares firmware, ibm-power, power-systems
No fix yet, per the sources.
IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources.
This page as .md · .json · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.