CVE-2026-65200

The openUBMC device-management process is vulnerable to an out-of-bounds heap read due to an integer underflow. Three response parsers within the shared transport libraries fail to perform a lower-bound check when subtracting a fixed header or reserved-field size from a device-supplied response l...

CVE-2026-65199

Huawei openUBMC contains a privilege escalation vulnerability where it assigns a full administrative privilege set to pseudo-identities representing SNMP callers . Specifically, in route_mapper/account.lua, the get_user_privilege function returns a complete nine-privilege set for a special_users ...

CVE-2026-65198

Huawei's openUBMC software ships with a hard-coded default SNMPv3 USM key used for both authentication and privacy. Because these keys are shipped as constants and are not rotated by the Administrator password reset, an attacker who recovers the key from the open-source build can authenticate to ...