CVE-2026-7254

IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users...

CVE-2026-7254 Open BMC Denial of Service

IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users...

Security Bulletin: This Power System update is being released to address CVE-2026-7254

Summary The BMC's HTTPS interface is vulnerable to denial of service attacks by unauthenticated network users. Vulnerability Details CVEID:CVE-2026-7254 DESCRIPTION: OpenBMC HTTPS service is vulnerable to attacks by unauthenticated network users which can result in denial of service. CWE:CWE-1284...

CVE-2024-41660

slpd-lite is a unicast SLP UDP server. Any OpenBMC system that includes the slpd-lite package is impacted. Installing this package is the default when building OpenBMC. Nefarious users can send slp packets to the BMC using UDP port 427 to cause memory overflow issues within the slpd-lite daemon o...

EUVD-2021-25656

Malware in sbrugna...

EUVD-2022-42786

Malicious code in bioql PyPI...

EUVD-2024-35201

Malicious code in bioql PyPI...

CVE-2024-31916

IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026...

Intel Server Product OpenBMC Security Vulnerability

Intel Server Product OpenBMC is an open source Baseboard Management Controller BMC solution from Intel Corporation USA. A security vulnerability previously existed in Intel Server Product OpenBMC egs-1.05, which stemmed from insufficient credential protection in the affected product. The...

IBM OPENBMC OP910 安全漏洞

IBM OPENBMC OP910 is a POWER8 and POWER9 emulator from International Business Machines IBM. A security vulnerability exists in IBM OPENBMC OP910 and OP940 that originates from allowing a privileged user to cause a denial of service by uploading or deleting too many CA certificates in a short peri...

PT-2022-22001 · Openbmc · Openbmc

Name of the Vulnerable Software and Affected Versions: OpenBMC Project affected versions not specified Description: A denial of service issue exists due to a problem in the multipart parser code. The issue arises when handling unclosed HTTP headers, specifically if a long enough HTTP header is...