CVE-2026-18857

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to...

CVE-2026-18857

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to...

CVE-2026-18857 This Power System update is being released to address

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to...

EUVD-2026-85893

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to...

CVE-2026-18849

IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impac...

CVE-2026-18849 IBM OpenBMC Code Execution

IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impac...

EUVD-2026-62849

IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impac...

CVE-2026-18849

IBM OpenBMC firmware (FW1060.00–FW1060.80) on Power 10 systems is vulnerable to arbitrary code execution via the BMC firmware update process. The root cause is CWE-22 (Path Traversal) . An attacker with authenticated administrator-level access to the BMC over an adjacent network can exploit this ...

PT-2026-78671

Name of the Vulnerable Software and Affected Versions IBM OpenBMC versions FW1060.00 through FW1060.80 Description A flaw exists in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can execute arbitrary code under specific conditions, which may...

CVE-2026-8058

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...

CVE-2026-7868

IBM OpenBMC (Baseboard Management Controller) on Power 10 and Power 11 systems is affected by an incorrect authorization flaw (CWE-863) in the BMC's HTTPS interface. ReadOnly user accounts can escalate to administrator privileges. Affected firmware ranges are FW1110.00–FW1110.20 (Power 11) and FW...

EUVD-2026-49886

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges...

CVE-2026-8058

Summary: IBM OPENBMC OPENBMC FW1110.00–FW1110.20 and FW1060.00–FW1060.71 allow a user to supply a password via a resource dump request, which is then stored in the BMC audit log and visible to an admin. Impact: sensitive information (passwords) logged in an admin-accessible audit log; CVSS 3.1 ba...

IBM OPENBMC Denial-of-Service Vulnerability

IBM OpenBMC is an open-based board management controller firmware, primarily used for server hardware monitoring and management. IBM OpenBMC has a denial-of-service vulnerability. The vulnerability arises from the failure to properly validate requests from unauthenticated network users. Attackers...

EUVD-2021-25397

Malware in sbrugna...

EUVD-2021-25398

Malware in sbrugna...

EUVD-2022-27634

Malicious code in bioql PyPI...

CVE-2022-22488

IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many CA certificates in a short period of time. IBM X-Force ID: 2226337...

CVE-2024-31916

IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026...

IBM OpenBMC Elevation of Privilege Vulnerability

IBM OpenBMC is a Linux distribution from International Business Machines IBM used to manage controllers for devices such as servers, top-of-rack switches, or RAID devices. An elevation of privilege vulnerability exists in IBM OpenBMC, which can be exploited by an attacker to gain administrative...