CVE-2026-16697— This Power System update is being released to address
Quick assessment
Affected
IBM OPENBMC
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
IBM Power Systems 固件版本 FW1060.00 至 FW1060.81、OP940.00 至 OP940.A2、OP910.00 至 OP910.95，以及 OP940.00 至 OP940.82，可能因未能对过量计算资源进行适当限制，而使远程攻击者能够引发拒绝服务（DoS）漏洞。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-16697
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
This Power System update is being released to address
Source: CVE Program / CVE List V5
Vulnerability Description
IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不加限制或调节的资源分配
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| IBM | OPENBMC | FW1060.00 ~ FW1060.81 |
cpe:2.3:a:ibm:openbmc:fw1060.00:*:*:*:*:*:*:*
|
|
| IBM | Power Hardware Management Console | OP940.00 ~ OP940.82 |
cpe:2.3:a:ibm:power_hardware_management_console:op940.00:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-16697
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-16697
请登录查看更多情报信息。
Other References for CVE-2026-16697 (1)
Same Patch Batch · IBM · 2026-11-08 · 83 CVEs total
| CVE-2026-107331 | 9.9 CRITICAL | DataStage on Cloud Pak for Data has several vulnerabilities |
| CVE-2026-15266 | 9.8 CRITICAL | Multiple Vulnerabilities in IBM Concert Software |
| CVE-2026-6715 | 9.8 CRITICAL | Multiple Vulnerabilities in IBM Concert Software |
| CVE-2026-114464 | 9.3 CRITICAL | Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for Oc |
| CVE-2026-101117 | 9.1 CRITICAL | IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) a |
| CVE-2026-17466 | 9.1 CRITICAL | IBM Optim Test Data Management 1.0.0, 1.1.0, and 1.2.0 impacted by Path Traversal, Rate Li |
| CVE-2026-8639 | 8.8 HIGH | IBM Verify Directory is affected by multiple vulnerabilities |
| CVE-2026-117545 | 8.8 HIGH | IBM webMethods Integration Server is vulnerable of bypassing the two-factor authentication |
| CVE-2026-110273 | 8.8 HIGH | Security Vulnerability identified in IBM TRIRIGA - Command Execution |
| CVE-2026-9764 | 8.8 HIGH | IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-define |
| CVE-2026-116499 | 8.4 HIGH | Arbitrary Code Execution in Qiskit SDK QPY Deserialization |
| CVE-2026-116501 | 8.4 HIGH | Qiskit SDK C API may trigger an out of bounds write on accessing the unitary matrix with q |
| CVE-2026-19133 | 8.1 HIGH | TS4500 Tape Library addresses security vulnerability |
| CVE-2026-97677 | 8.1 HIGH | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-105467 | 8.1 HIGH | IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS |
| CVE-2026-107330 | 7.7 HIGH | DataStage on Cloud Pak for Data has several vulnerabilities |
| CVE-2026-18093 | 7.5 HIGH | IBM App Connect Enterprise is vulnerable to a credential exposure |
| CVE-2026-93879 | 7.5 HIGH | Hibernate Validator is affected by an expression language injection vulnerability |
| CVE-2026-18893 | 7.1 HIGH | CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities |
| CVE-2026-78537 | 6.8 MEDIUM | IBM Guardium Key Lifecycle Manager is affected by a security vulnerability |
Showing top 20 of 83 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: OPENBMC
-
CVE-2026-17427
This Power System update is being released to address -
CVE-2026-17426
This Power System update is being released to address -
CVE-2026-16682
This Power System update is being released to address -
CVE-2026-65200
Huawei malicious on-bus PLDM or NCSI device can drive out-of -
CVE-2026-65199
Huawei openUBMC low-privilege SNMP to administrator privileg
Same vendor: IBM
-
CVE-2026-17427
This Power System update is being released to address -
CVE-2026-17426
This Power System update is being released to address -
CVE-2026-16682
This Power System update is being released to address -
CVE-2026-97677
Langflow OSS is affected by multiple vulnerabilities -
CVE-2026-9764
IBM Bob is vulnerable to Remote Code Execution due to improp
Same weakness: CWE-770
-
CVE-2026-93005
Multiple security vulnerabilities are addressed with IBM Pro -
CVE-2026-124553
BabelDOC from 0.3.61 before 0.7.0 Denial of Service via ToUn -
CVE-2026-123610
rustls before 0.23.46 Denial of Service via Brotli Certifica -
CVE-2026-123577
Hickory DNS 0.24.0 before 0.26.2 DoH Unbounded Request Body -
CVE-2026-123576
Hickory DNS 0.24.0 through 0.26.1 Memory Exhaustion via DNS-