CVE-2026-16933
Last modified
CVE-2026-16933 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.. EPSS estimates a 0.12% chance of exploitation in the next 30 days.
Description
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Power System S1122 \(9824-22a\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System S1122 \(9824-22a\) Firmware | fw1120.00 |
| Ibm | Power System S1124 \(9824-42a\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System S1124 \(9824-42a\) Firmware | fw1120.00 |
| Ibm | Power System S1122s \(9824-22b\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System S1122s \(9824-22b\) Firmware | fw1120.00 |
| Ibm | Power System S1114 \(9824-41b\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System S1114 \(9824-41b\) Firmware | fw1120.00 |
| Ibm | Power System L1122 \(9856-22h\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System L1122 \(9856-22h\) Firmware | fw1120.00 |
| Ibm | Power System L1124 \(9856-42h\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System L1124 \(9856-42h\) Firmware | fw1120.00 |
| Ibm | Power System E1150 \(9043-Mru\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System E1150 \(9043-Mru\) Firmware | fw1120.00 |
| Ibm | Power System S1112 \(9242-21b\) Firmware | fw1120.00 |
| Ibm | Power System S1112 \(9242-21t\) Firmware | fw1120.00 |
| Ibm | Power System E1080 \(9080-Hex\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System S1022 \(9105-22a\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System S1024 \(9105-42a\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System S1022s \(9105-22b\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System S1014 \(9105-41b\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System L1022 \(9786-22h\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System L1024 \(9786-42h\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System E1050 \(9043-Mrx\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System S1012 \(9028-21b\) Firmware | >= fw1060.00, < fw1060.81 |
| Ibm | Power System E1180 \(9080-Heu\) Firmware | >= fw1110.00, < fw1110.31 |
| Ibm | Power System E1180 \(9080-Heu\) Firmware | fw1120.00 |
| Ibm | Power System S922 \(9009-22g\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System H922 \(9223-22s\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System S914 \(9009-41g\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System S924 \(9009-42g\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System H924 \(9223-42s\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System E950 \(9040-Mr9\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System E980 \(9080-M9s\) Firmware | >= fw950.00, < fw950.h3 |
| Ibm | Power System Ac922 \(8335-Gth\) Firmware | >= op940, < op940.a2 |
| Ibm | Power System Ac922 \(8335-Gtx\) Firmware | >= op940, < op940.a2 |
| Ibm | Power Hardware Management Console \(7063-Cr2\) Firmware | >= op940, < op940.82 |
References
- https://www.ibm.com/support/pages/node/7283216Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-16933?
How severe is CVE-2026-16933?
How do I fix CVE-2026-16933?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-16928IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a …7.5
- CVE-2026-16929IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…6.5
- CVE-2026-1693The OAuth grant type Resource Owner Password Credentials (RO…7.5
- CVE-2026-16930IBM Power Systems Firmware FW1120.00, FW1110.00 through FW11…8.2
- CVE-2026-16931IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker t…7.5
- CVE-2026-16932IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a …8.8
- CVE-2026-16934IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a …8.8
- CVE-2026-16935IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a …7
- CVE-2026-16936IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a …8.8
- CVE-2026-16937IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a …7.8
- CVE-2026-16938IBM Power Systems Firmware FW1120.00, FW1110.00 through FW11…6.9
- CVE-2026-1694HTTP headers are added by the default configuration of IIS a…4.3
Are you affected by CVE-2026-16933?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST