CVE-2026-96265
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacke
CVSS
8.2
Alto
EPSS
0.2%
p6
KEV
—
Exploit Today
2
0-100
Publicado: 12 oct 2026 · Última mod.: 13 oct 2026 · CWE-119
0.2%EPSS · 30 días0.2%
2026-10-132026-10-23
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory, compromising the host firmware boot stack and the hypervisor subsequently loaded by it. Successful exploitation results in a confidentiality, integrity, and availability impact to the managed system.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-957213.3 BAJ0.2%
——0No description provided3hCVE-2026-957204.4 MED1.1%
——0No description provided3hCVE-2026-957146.8 MED7.6%
——2No description provided3hCVE-2026-957137.0 ALT6.5%
——2No description provided3hCVE-2026-957107.1 ALT7.7%
——2No description provided2hCVE-2026-957077.2 ALT29.4%
——9No description provided2h