# CVE-2026-96263: IBM Power Systems firmware image validation bypass Source: https://junglewise.ai/threats/cve-2026-96263-ibm-power-systems-firmware-fw1120-00-through-fw1120-01-fw1110-00 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Published: 2026-10-12. Updated: 2026-10-16 License: CC BY 4.0 with a link back CVE-2026-96263 · Severity: high · CVSS 8.2 · Published 2026-10-12 IBM Power Systems firmware used in enterprise servers contains a validation flaw that allows attackers with service processor access to inject malicious firmware updates. Successful exploitation grants complete control over the host system, compromising data confidentiality, system integrity, and availability across the entire infrastructure. Technologies: [IBM Power System E1050](https://junglewise.ai/threats/technologies/power-system-e1050), [IBM Power System L1022](https://junglewise.ai/threats/technologies/power-system-l1022), [IBM Power System L1024](https://junglewise.ai/threats/technologies/power-system-l1024), [IBM Power System S1012](https://junglewise.ai/threats/technologies/power-system-s1012), [IBM Power System S1014](https://junglewise.ai/threats/technologies/power-system-s1014), [IBM Power System S1022](https://junglewise.ai/threats/technologies/power-system-s1022), [IBM Power System S1022s](https://junglewise.ai/threats/technologies/power-system-s1022s), [IBM Power System S1024](https://junglewise.ai/threats/technologies/power-system-s1024), [IBM PowerVM Hypervisor](https://junglewise.ai/threats/technologies/powervm-hypervisor). Vendors: [IBM](https://junglewise.ai/threats/vendors/ibm). ## Quick answers **Is CVE-2026-96263 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-96263 being exploited in the wild. **How severe is CVE-2026-96263?** High severity, with a CVSS score of 8.2, published 12 October 2026. **Which products and versions are affected?** IBM Power System E1050 FW1060.00–FW1060.81; IBM Power System E1080 FW1060.00–FW1060.81; IBM Power System E1150 FW1120.00–FW1120.01, FW1110.00–FW1110.31; IBM Power System E1180 FW1120.00–FW1120.01, FW1110.00–FW1110.31; and 15 more. **Is there a fix for CVE-2026-96263?** Yes: fixed in Power System E1180: FW1110.32(1110_138) or FW1120.02(1120_171) or newer; Power Systems S1122, S1124, S1122s, S1114, L1122, L1124, E1150: FW1110.32(1110_160) or FW1120.02(1120_195) or newer; Power System S1112: FW1120.02(1120_195) or newer; Power System E1080: FW1060.82(1060_189) or newer; Power Systems S1022, S1024, S1022s, S1014, L1022, L1024, E1050, S1012: FW1060.82(1060_199) or newer. Until then: If performing a concurrent firmware upgrade, reboot the system after updating to the new firmware level to fully mitigate this vulnerability. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve. **How is CVE-2026-96263 attacked?** It is attacked with local access, in device firmware. **Am I affected by CVE-2026-96263?** Check whether you run IBM Power System E1050, IBM Power System E1080, IBM Power System E1150 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you. ## How to fix - Fixed in Power System E1180: FW1110.32(1110_138) or FW1120.02(1120_171) or newer; Power Systems S1122, S1124, S1122s, S1114, L1122, L1124, E1150: FW1110.32(1110_160) or FW1120.02(1120_195) or newer; Power System S1112: FW1120.02(1120_195) or newer; Power System E1080: FW1060.82(1060_189) or newer; Power Systems S1022, S1024, S1022s, S1014, L1022, L1024, E1050, S1012: FW1060.82(1060_199) or newer If performing a concurrent firmware upgrade, reboot the system after updating to the new firmware level to fully mitigate this vulnerability. ## Technical details A stack-based buffer overflow in the host firmware boot process image validation path allows arbitrary code execution when a maliciously crafted firmware image is supplied. The vulnerability requires service processor access and high privileges, affecting PowerVM Hypervisor firmware versions FW1120.00–FW1120.01, FW1110.00–FW1110.31, and FW1060.00–FW1060.81. Fixes are available for affected Power 10 and Power 11 systems. ## Affected products - IBM PowerVM Hypervisor FW1120.00–FW1120.01, FW1110.00–FW1110.31, FW1060.00–FW1060.81 - IBM Power System E1180 FW1120.00–FW1120.01, FW1110.00–FW1110.31 - IBM Power System S1122 FW1120.00–FW1120.01, FW1110.00–FW1110.31 - IBM Power System S1124 FW1120.00–FW1120.01, FW1110.00–FW1110.31 - IBM Power System S1122s FW1120.00–FW1120.01, FW1110.00–FW1110.31 - IBM Power System S1114 FW1120.00–FW1120.01, FW1110.00–FW1110.31 - IBM Power System L1122 FW1120.00–FW1120.01, FW1110.00–FW1110.31 - IBM Power System L1124 FW1120.00–FW1120.01, FW1110.00–FW1110.31 - IBM Power System E1150 FW1120.00–FW1120.01, FW1110.00–FW1110.31 - IBM Power System S1112 FW1120.00–FW1120.01 - IBM Power System E1080 FW1060.00–FW1060.81 - IBM Power System S1022 FW1060.00–FW1060.81 - IBM Power System S1024 FW1060.00–FW1060.81 - IBM Power System S1022s FW1060.00–FW1060.81 - IBM Power System S1014 FW1060.00–FW1060.81 - IBM Power System L1022 FW1060.00–FW1060.81 - IBM Power System L1024 FW1060.00–FW1060.81 - IBM Power System E1050 FW1060.00–FW1060.81 - IBM Power System S1012 FW1060.00–FW1060.81 ## Timeline - 2026-09-30: advisory ## References - [https://www.ibm.com/support/pages/node/7290129](https://www.ibm.com/support/pages/node/7290129) ## Related threats - [IBM Power Systems OpenBMC denial of service via unhandled exception](https://junglewise.ai/threats/cve-2026-17426-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-could) - [IBM Power Systems firmware denial of service in BMC](https://junglewise.ai/threats/cve-2026-16697-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-op940-00) - [IBM Power Systems Firmware memory corruption in service processor mailbox](https://junglewise.ai/threats/cve-2026-96265-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-is) - [IBM Power Systems Firmware buffer overflow in service processor mailbox](https://junglewise.ai/threats/cve-2026-96264-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-is) - [IBM Power Systems Firmware stack buffer overflow in service processor](https://junglewise.ai/threats/cve-2026-96262-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-is)