Skip to content
OpenAdvisories

Product · IBM

OPENBMC

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-17427

    This Power System update is being released to address

    IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length.

    IBM OPENBMC Power Hardware Management Console
  • Medium 6.5
    CVE-2026-17426

    This Power System update is being released to address

    IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception.

    IBM OPENBMC
  • Medium 6.5
    CVE-2026-16682

    This Power System update is being released to address

    IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service du…

    IBM OPENBMC Hardware Management Console
  • Medium 6.8
    CVE-2026-18849

    IBM OpenBMC Code Execution

    IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidential…

    IBM OPENBMC
  • Medium 6.5
    CVE-2026-7868

    This Power System update is being released to address incorrect authorization

    IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges.

    IBM OPENBMC
  • Medium 4.5
    CVE-2026-8058

    This Power System update is being released to address a sensitive information disclosure

    IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

    IBM OPENBMC
  • Medium 5.3
    CVE-2026-7254

    Open BMC Denial of Service

    IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users.

    IBM OPENBMC
  • Medium 4.9
    CVE-2022-22488

    IBM OpenBMC denial of service

    IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many CA certificates in a short period of time. IBM X-Force ID: 2226337.

    IBM OPENBMC
  • Medium 5.3
    CVE-2021-38960

    IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID…

    IBM OPENBMC HMC
  • Medium 6.1
    CVE-2021-38961

    IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript …

    IBM OPENBMC