Veille CVE

Recherche « IBM OPENBMC »

5 CVE

  1. CVE-2026-18857 3.4 Faible

    IBM OPENBMC · Ibm power system s1122 \(9824-22a\) firmware · Ibm power system s1124 \(9824-42a\) firmware · Ibm power system s1122s \(9824-22b\) firmware

    IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.

  2. CVE-2026-18849 6.8 Moyenne

    IBM OPENBMC · Ibm power system e1050 \(9043-mrx\) firmware · Ibm power system l1022 \(9786-22h\) firmware · Ibm power system l1024 \(9786-42h\) firmware

    IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.

  3. CVE-2026-8058 4.9 Moyenne

    IBM OPENBMC · Ibm power system s1122 \(9824-22a\) firmware · Ibm power system s1124 \(9824-42a\) firmware · Ibm power system s1122s \(9824-22b\) firmware

    IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

  4. CVE-2026-7868 8.8 Élevée

    IBM OPENBMC · Ibm power system s1122 \(9824-22a\) firmware · Ibm power system s1124 \(9824-42a\) firmware · Ibm power system s1122s \(9824-22b\) firmware

    IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges.

  5. CVE-2026-7254 5.3 Moyenne

    IBM OPENBMC

    IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users.