{"id":"CVE-2026-16697","kind":"vulnerability","aliases":["CVE-2026-16697"],"related":[],"title":"IBM Power Systems Firmware: excessive resource use lets a remote attacker cause outages","description":"IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and  OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources.","summary":"IBM Power Systems firmware versions FW1060, OP940 and OP910 fail to restrict excessive computational resource use. A remote attacker can trigger a denial of service, taking the affected system offline.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["firmware","ibm-power","infrastructure","power-systems"],"not_affected_if":["unknown"],"how_to_check":"- Check the installed firmware level on the Power Systems server against the affected ranges in the IBM advisory (FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, OP940.00 through OP940.82)\n- Confirm the exact firmware ranges in the IBM security bulletin, as the sources list them in a way that is partly ambiguous","fix":null,"status":"open","published_at":"2026-11-08T20:17:24+00:00","first_seen_at":"2026-11-08T20:22:46+00:00","triaged_at":"2026-11-08T20:23:34+00:00","updated_at":"2026-11-08T20:23:34+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-08T20:23:34Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"unknown","title":"IBM Power Systems Firmware: excessive resource use lets a remote attacker cause outages","impact":"low","summary":"IBM Power Systems firmware versions FW1060, OP940 and OP910 fail to restrict excessive computational resource use. A remote attacker can trigger a denial of service, taking the affected system offline.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ibm-power","firmware","power-systems"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Remote attacker takes the server or its services offline","analyst_note":"Find the IBM security bulletin for CVE-2026-16697 to confirm affected firmware ranges, the fixed firmware levels, and the attack vector.","how_to_check":"- Check the installed firmware level on the Power Systems server against the affected ranges in the IBM advisory (FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, OP940.00 through OP940.82)\n- Confirm the exact firmware ranges in the IBM security bulletin, as the sources list them in a way that is partly ambiguous","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Organizations running IBM Power Systems servers with the listed firmware levels are exposed to remote denial of service. Systems on firmware outside the listed ranges are not named as affected. The sources do not describe required network position or configuration.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.00075,"input_tokens":4574,"output_tokens":586,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-16697':16A,19A '-2026':15A,18A 'affect':55B 'allow':76C 'attack':11A,46B,79C 'caus':12A,81C 'comput':41B,92C 'could':75C 'cve':14A,17A 'denial':50B,83C 'due':86C 'excess':5A,40B,91C 'fail':37B 'firmwar':4A,20B,31B,61C 'fw1060':33B 'fw1060.00':62C 'fw1060.81':64C 'ibm':1A,22B,28B,58C 'ibm-pow':21B 'improp':88C 'infrastructur':24B 'let':8A 'offlin':57B 'op910':36B 'op910.00':68C 'op910.95':70C 'op940':34B 'op940.00':65C,72C 'op940.82':74C 'op940.a2':67C 'outag':13A 'power':2A,23B,26B,29B,59C 'power-system':25B 'remot':10A,45B,78C 'resourc':6A,42B,93C 'restrict':39B,89C 'servic':52B,85C 'system':3A,27B,30B,56B,60C 'take':53B 'trigger':48B 'use':7A,43B 'version':32B","nicknames":[],"mitigations":[],"who_affected":"Organizations running IBM Power Systems servers with the listed firmware levels are exposed to remote denial of service. Systems on firmware outside the listed ranges are not named as affected. The sources do not describe required network position or configuration.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["firmware","ibmpower","infrastructure","medium","powersystems"],"campaign_type":null,"search_a":"'-16697':16A,19A '-2026':15A,18A 'attack':11A 'caus':12A 'cve':14A,17A 'excess':5A 'firmwar':4A 'ibm':1A 'let':8A 'outag':13A 'power':2A 'remot':10A 'resourc':6A 'system':3A 'use':7A","search_b":"'affect':55B 'attack':46B 'comput':41B 'denial':50B 'excess':40B 'fail':37B 'firmwar':20B,31B 'fw1060':33B 'ibm':22B,28B 'ibm-pow':21B 'infrastructur':24B 'offlin':57B 'op910':36B 'op940':34B 'power':23B,26B,29B 'power-system':25B 'remot':45B 'resourc':42B 'restrict':39B 'servic':52B 'system':27B,30B,56B 'take':53B 'trigger':48B 'use':43B 'version':32B","search_c":"'allow':76C 'attack':79C 'caus':81C 'comput':92C 'could':75C 'denial':83C 'due':86C 'excess':91C 'firmwar':61C 'fw1060.00':62C 'fw1060.81':64C 'ibm':58C 'improp':88C 'op910.00':68C 'op910.95':70C 'op940.00':65C,72C 'op940.82':74C 'op940.a2':67C 'power':59C 'remot':78C 'resourc':93C 'restrict':89C 'servic':85C 'system':60C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T20:17:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-16697","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16697","severity":null,"published_at":"2026-11-08T20:17:24+00:00","modified_at":"2026-11-08T20:17:24+00:00","first_seen_at":"2026-11-08T20:22:46+00:00","fetched_at":"2026-11-08T20:22:46+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}