CVE-2026-18681EPSS p24.7%

CVE-2026-18681CVE-2026-18681

ibm / power_system_s922_\(9009-22g\)_firmware

Description

IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.

Scoring

CVSS 6.8 ()
VectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS0.34% probability of exploitation · percentile 24.7% · 2026-10-05T12:00:23Z
Last modified2026-08-25
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.