Is CVE-2026-18681 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18681?

CVE-2026-18681 has a CVSS v3 severity of MEDIUM (6.8).

Back

CVE-2026-18681

Description

IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.