# IBM Power Systems Firmware vulnerabilities Source: https://junglewise.ai/threats/technologies/power-systems-firmware Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/power-systems-firmware.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 14 vulnerabilities in IBM Power Systems Firmware: 1 in the last 7 days and 14 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-17427, was published on 8 November 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 1 - Last 30 days: 1 - Last 90 days: 14 - All time: 14 (2 critical, 0 exploited in the wild) ## About IBM Power Systems Firmware Firmware for IBM Power Systems servers. ## Latest IBM Power Systems Firmware vulnerabilities - [CVE-2026-17427: IBM Power Systems firmware denial of service via input validation](https://junglewise.ai/threats/cve-2026-17427-ibm-power-systems-firmware-fw1060-00-through-fw1060-81-op940-00) (medium, CVSS 6.5, published 8 Nov 2026) - [CVE-2026-16678: IBM Power Systems Firmware resource exhaustion DoS](https://junglewise.ai/threats/cve-2026-16678-ibm-power-systems-firmware-fw1110-00-through-fw1110-31-fw1120-00) (medium, CVSS 4.5, published 12 Oct 2026) - [CVE-2026-18848: IBM Power Systems Firmware CSRF in ASMI web interface](https://junglewise.ai/threats/cve-2026-18848-ibm-power-systems-firmware-csrf-in-asmi-web-interface) (high, CVSS 8.3, published 19 Aug 2026) - [CVE-2026-17494: IBM Power Systems Firmware stack-based buffer overflow in BMC interface](https://junglewise.ai/threats/cve-2026-17494-ibm-power-systems-firmware-stack-based-buffer-overflow-in-bmc) (high, CVSS 8.2, published 19 Aug 2026) - [CVE-2026-17429: IBM Power Systems Firmware incorrect authorization in BMC/FSP interface](https://junglewise.ai/threats/cve-2026-17429-ibm-power-systems-firmware-incorrect-authorization-in-bmc-fsp) (high, CVSS 8.1, published 19 Aug 2026) - [CVE-2026-17100: IBM Power Systems Firmware out-of-bounds write in service processor mailbox](https://junglewise.ai/threats/cve-2026-17100-ibm-power-systems-firmware-out-of-bounds-write-in-service) (high, CVSS 8.2, published 19 Aug 2026) - [CVE-2026-17093: IBM Power Systems Firmware buffer overflow in configuration parsing](https://junglewise.ai/threats/cve-2026-17093-ibm-power-systems-firmware-buffer-overflow-in-configuration) (high, CVSS 8.2, published 19 Aug 2026) - [CVE-2026-16938: IBM Power Systems Firmware missing authorization in FSP configuration](https://junglewise.ai/threats/cve-2026-16938-ibm-power-systems-firmware-missing-authorization-in-fsp) (medium, CVSS 6.9, published 19 Aug 2026) - [CVE-2026-16930: IBM Power Systems Firmware code execution in BMC/FSP interface](https://junglewise.ai/threats/cve-2026-16930-ibm-power-systems-firmware-code-execution-in-bmc-fsp-interface) (high, CVSS 8.2, published 19 Aug 2026) - [CVE-2026-16835: IBM Power Systems firmware authentication bypass in FSP management protocol](https://junglewise.ai/threats/cve-2026-16835-ibm-power-systems-firmware-authentication-bypass-in-fsp) (critical, CVSS 9.6, published 19 Aug 2026) - [CVE-2026-16832: IBM Power Systems Firmware stack-based buffer overflow in FSP management protocol](https://junglewise.ai/threats/cve-2026-16832-ibm-power-systems-firmware-stack-based-buffer-overflow-in-fsp) (high, CVSS 8.4, published 19 Aug 2026) - [CVE-2026-16828: IBM Power Systems Firmware out-of-bounds read in ASMI web interface](https://junglewise.ai/threats/cve-2026-16828-ibm-power-systems-firmware-out-of-bounds-read-in-asmi-web) (high, CVSS 7.6, published 19 Aug 2026) - [CVE-2026-16687: IBM Power Systems Firmware stack buffer overflow in ASMI web interface](https://junglewise.ai/threats/cve-2026-16687-ibm-power-systems-firmware-stack-buffer-overflow-in-asmi-web) (critical, CVSS 9.6, published 19 Aug 2026) - [CVE-2026-19234: IBM Power Systems Firmware stack-based buffer overflow in boot image validation](https://junglewise.ai/threats/cve-2026-19234-ibm-power-systems-firmware-stack-based-buffer-overflow-in-boot) (high, CVSS 8.2, published 19 Aug 2026) ## Most severe IBM Power Systems Firmware vulnerabilities - [CVE-2026-16835: IBM Power Systems firmware authentication bypass in FSP management protocol](https://junglewise.ai/threats/cve-2026-16835-ibm-power-systems-firmware-authentication-bypass-in-fsp) (critical, CVSS 9.6, published 19 Aug 2026) - [CVE-2026-16687: IBM Power Systems Firmware stack buffer overflow in ASMI web interface](https://junglewise.ai/threats/cve-2026-16687-ibm-power-systems-firmware-stack-buffer-overflow-in-asmi-web) (critical, CVSS 9.6, published 19 Aug 2026) - [CVE-2026-16832: IBM Power Systems Firmware stack-based buffer overflow in FSP management protocol](https://junglewise.ai/threats/cve-2026-16832-ibm-power-systems-firmware-stack-based-buffer-overflow-in-fsp) (high, CVSS 8.4, published 19 Aug 2026) - [CVE-2026-18848: IBM Power Systems Firmware CSRF in ASMI web interface](https://junglewise.ai/threats/cve-2026-18848-ibm-power-systems-firmware-csrf-in-asmi-web-interface) (high, CVSS 8.3, published 19 Aug 2026) - [CVE-2026-17494: IBM Power Systems Firmware stack-based buffer overflow in BMC interface](https://junglewise.ai/threats/cve-2026-17494-ibm-power-systems-firmware-stack-based-buffer-overflow-in-bmc) (high, CVSS 8.2, published 19 Aug 2026) - [CVE-2026-17100: IBM Power Systems Firmware out-of-bounds write in service processor mailbox](https://junglewise.ai/threats/cve-2026-17100-ibm-power-systems-firmware-out-of-bounds-write-in-service) (high, CVSS 8.2, published 19 Aug 2026) - [CVE-2026-17093: IBM Power Systems Firmware buffer overflow in configuration parsing](https://junglewise.ai/threats/cve-2026-17093-ibm-power-systems-firmware-buffer-overflow-in-configuration) (high, CVSS 8.2, published 19 Aug 2026) - [CVE-2026-16930: IBM Power Systems Firmware code execution in BMC/FSP interface](https://junglewise.ai/threats/cve-2026-16930-ibm-power-systems-firmware-code-execution-in-bmc-fsp-interface) (high, CVSS 8.2, published 19 Aug 2026) - [CVE-2026-19234: IBM Power Systems Firmware stack-based buffer overflow in boot image validation](https://junglewise.ai/threats/cve-2026-19234-ibm-power-systems-firmware-stack-based-buffer-overflow-in-boot) (high, CVSS 8.2, published 19 Aug 2026) - [CVE-2026-17429: IBM Power Systems Firmware incorrect authorization in BMC/FSP interface](https://junglewise.ai/threats/cve-2026-17429-ibm-power-systems-firmware-incorrect-authorization-in-bmc-fsp) (high, CVSS 8.1, published 19 Aug 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 12 | 2 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 1 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other IBM technologies - [IBM API Connect](https://junglewise.ai/threats/technologies/api-connect): 207 vulnerabilities - [IBM AIX](https://junglewise.ai/threats/technologies/aix): 181 vulnerabilities - [IBM Langflow](https://junglewise.ai/threats/technologies/langflow-oss): 154 vulnerabilities - [IBM i](https://junglewise.ai/threats/technologies/i): 120 vulnerabilities - [IBM Guardium Data Protection](https://junglewise.ai/threats/technologies/guardium-data-protection): 93 vulnerabilities - [IBM PowerVM VIOS](https://junglewise.ai/threats/technologies/powervm-vios): 73 vulnerabilities - [IBM Vios](https://junglewise.ai/threats/technologies/vios): 72 vulnerabilities - [IBM WebSphere Application Server](https://junglewise.ai/threats/technologies/websphere-application-server): 67 vulnerabilities - [IBM WebSphere Application Server Liberty](https://junglewise.ai/threats/technologies/websphere-application-server-liberty): 56 vulnerabilities - [IBM Verify Identity Access](https://junglewise.ai/threats/technologies/verify-identity-access): 50 vulnerabilities - [IBM Datastage On Cloud Pak For Data](https://junglewise.ai/threats/technologies/datastage-on-cloud-pak-for-data): 48 vulnerabilities - [IBM Mq](https://junglewise.ai/threats/technologies/mq): 46 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "IBM Power Systems Firmware vulnerabilities", https://junglewise.ai/threats/technologies/power-systems-firmware, 12 November 2026.