Skip to content
OpenAdvisories

Vendor

OpenBMC

3 known vulnerabilities.

Products

phosphor-net-ipmid 2 slpd-lite 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-16141

    OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Value

    OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defaults. The IPMI service then accepts a R…

    OpenBMC phosphor-net-ipmid
  • High 8.8
    CVE-2026-16140

    OpenBMC IPMI Privilege Escalation via Retargeted RAKP 1

    OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a logic flaw where the authorization context of an existing session can be replaced with a target account while still maintaining the original integrity and encryption keys. Several downstrea…

    OpenBMC phosphor-net-ipmid