6.8
Medium
CVE-2026-18849 IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process
Description
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OPENBMC | Versions not published |
Other CVEs of OPENBMC
The 10 CVEs of OPENBMC →
CVE-2026-18857
IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a…
3.4
Low
CVE-2026-7868
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges…
6.5
Medium
CVE-2026-8058
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a…
4.5
Medium
CVE-2026-7254
IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users
5.3
Medium