225 matches found
CVE-2026-7868
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges...
CVE-2026-8058
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...
CVE-2026-7868
IBM OPENBMC OPENBMC vulnerable to privilege escalation where ReadOnly users can obtain administrator privileges. Affected: OPENBMC firmware FW1110.00–FW1110.20 and FW1060.00–FW1060.71. Root cause: incorrect authorization (CWE-863). Impact: potential elevation of privileges on the BMC’s HTTPS inte...
CVE-2026-7868
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges...
CVE-2026-7868 This Power System update is being released to address incorrect authorization
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges...
EUVD-2026-49886
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges...
CVE-2026-8058 This Power System update is being released to address a sensitive information disclosure
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...
CVE-2026-8058
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...
CVE-2026-8058
Summary: IBM OPENBMC OPENBMC FW1110.00–FW1110.20 and FW1060.00–FW1060.71 allow a user to supply a password via a resource dump request, which is then stored in the BMC audit log and visible to an admin. Impact: sensitive information (passwords) logged in an admin-accessible audit log; CVSS 3.1 ba...
EUVD-2026-49885
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...
PT-2026-65527
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges...
PT-2026-65528
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...
Security Bulletin: This Power System update is being released to address CVE-2026-7868
Summary This impacts the BMC's HTTPS interface for BMC ReadOnly user accounts. Vulnerability Details CVEID:CVE-2026-7868 DESCRIPTION: OPENBMC allows ReadOnly users to escalate privileges and give themselves administrator privileges. CWE:CWE-863: Incorrect Authorization CVSS Source: IBM CVSS Base...
Security Bulletin: This Power System update is being released to address CVE-2026-8058
Summary The BMC's diagnostic interface is affected. Vulnerability Details CVEID:CVE-2026-8058 DESCRIPTION: OPENBMC allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it. CWE:CWE-200: Exposure of Sensitive...
CVE-2026-7254
IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users...
OpenBMC Denial of Service / Authentication Bypass
OpenBMC suffers from denial of service and authentication bypass vulnerabilities...
CVE-2026-7254
IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users...
CVE-2026-7254
IBM OPENBMC firmware FW1110.00–FW1110.11 is vulnerable to denial of service via the BMC HTTPS interface by unauthenticated network users. The IBM bulletin identifies the affected product as OPENBMC and specifies that the vulnerability stems from improper validation in the HTTPS service, with CVSS...
