CVE-2026-18857: IBM Power System e1050 (9043-Mrx) Firmware

Low severity, CVSS 3.4. EPSS: 0.1% chance of exploitation in the next 30 days.

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.

Affected products

IBM Power System e1050 (9043-Mrx) Firmware: from fw1060.00, before fw1060.82 (fixed in fw1060.82)
IBM Power System e1150 (9043-Mru) Firmware: from fw1110.00, before fw1110.32 (fixed in fw1110.32); from fw1120.00, before fw1120.02 (fixed in fw1120.02)
IBM Power System l1022 (9786-22h) Firmware: from fw1060.00, before fw1060.82 (fixed in fw1060.82)
IBM Power System l1024 (9786-42h) Firmware: from fw1060.00, before fw1060.82 (fixed in fw1060.82)
IBM Power System l1122 (9856-22h) Firmware: from fw1110.00, before fw1110.32 (fixed in fw1110.32); from fw1120.00, before fw1120.02 (fixed in fw1120.02)
IBM Power System l1124 (9856-42h) Firmware: from fw1110.00, before fw1110.32 (fixed in fw1110.32); from fw1120.00, before fw1120.02 (fixed in fw1120.02)
IBM Power System s1012 (9028-21b) Firmware: from fw1060.00, before fw1060.82 (fixed in fw1060.82)
IBM Power System s1014 (9105-41b) Firmware: from fw1060.00, before fw1060.82 (fixed in fw1060.82)
IBM Power System s1022 (9105-22a) Firmware: from fw1060.00, before fw1060.82 (fixed in fw1060.82)
IBM Power System s1022s (9105-22b) Firmware: from fw1060.00, before fw1060.82 (fixed in fw1060.82)
IBM Power System s1024 (9105-42a) Firmware: from fw1060.00, before fw1060.82 (fixed in fw1060.82)
IBM Power System s1112 (9242-21b) Firmware: from fw1120.00, before fw1120.02 (fixed in fw1120.02)
IBM Power System s1112 (9242-21t) Firmware: from fw1120.00, before fw1120.02 (fixed in fw1120.02)
IBM Power System s1114 (9824-41b) Firmware: from fw1110.00, before fw1110.32 (fixed in fw1110.32); from fw1120.00, before fw1120.02 (fixed in fw1120.02)
IBM Power System s1122 (9824-22a) Firmware: from fw1110.00, before fw1110.32 (fixed in fw1110.32); from fw1120.00, before fw1120.02 (fixed in fw1120.02)
IBM Power System s1122s (9824-22b) Firmware: from fw1110.00, before fw1110.32 (fixed in fw1110.32); from fw1120.00, before fw1120.02 (fixed in fw1120.02)
IBM Power System s1124 (9824-42a) Firmware: from fw1110.00, before fw1110.32 (fixed in fw1110.32); from fw1120.00, before fw1120.02 (fixed in fw1120.02)

Published 2026-09-24. Last modified 2026-09-30.