What is GHSA-4mp3-cxqr-qxhw?

GHSA-4mp3-cxqr-qxhw is a security advisory published by GitHub Security Advisories with High severity. IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host...

Which CVE IDs does GHSA-4mp3-cxqr-qxhw cover?

GHSA-4mp3-cxqr-qxhw covers the following CVE IDs: CVE-2026-96261. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4mp3-cxqr-qxhw?

GHSA-4mp3-cxqr-qxhw has a CVSS v3 base score of 7.3, published by GitHub Security Advisories.

GHSA-4mp3-cxqr-qxhwHighCVSS 7.3

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host...

Vendor

GitHub Security Advisories

Published

October 12, 2026

Last Modified

October 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-96261 →

📋 Description

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory corruption during system initialisation, resulting in an integrity and availability impact to the managed system.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-96261
https://www.ibm.com/support/pages/node/7290127
https://github.com/advisories/GHSA-4mp3-cxqr-qxhw