Skip to content

Known vulnerabilities in IBM OPENBMC

Is your version affected?

CVE Summary Score Published
CVE-2026-18857 IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a… 3.4 Low Sep 24, 2026
CVE-2026-18849 IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process 6.8 Medium Aug 19, 2026
CVE-2026-7868 IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges… 6.5 Medium Jul 28, 2026
CVE-2026-8058 IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a… 4.5 Medium Jul 28, 2026
CVE-2026-7254 IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users 5.3 Medium May 27, 2026
CVE-2024-35124 A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and… 7.5 High Aug 13, 2024
CVE-2024-31916 IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an… 7.5 High Jun 27, 2024
CVE-2022-22488 IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many… 4.9 Medium Nov 18, 2022
CVE-2021-38960 IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information 5.3 Medium Feb 4, 2022
CVE-2021-38961 IBM OPENBMC OP910 is vulnerable to cross-site scripting 6.1 Medium Dec 27, 2021

Other IBM products