Skip to content
OpenAdvisories
Medium · 4.5 CVE-2026-8058 EUVD-2026-49885GHSA-mm39-vmv6-rcvf

This Power System update is being released to address a sensitive information disclosure

Published Jul 28, 2026 · Updated Jul 28, 2026 · Assigned by ibm

Vendor: IBM Product: OPENBMC

Description

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

Affected products

VendorProductAffectedFixed
IBM OPENBMC FW1110.00 – ≤ FW1110.20, FW1060.00 – ≤ FW1060.71 —

References