CVE-2026-18849mediumCWE-22

CVE-2026-18849: falha de média gravidade em IBM OPENBMC

IBM OpenBMC Code Execution

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar OPENBMC

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.8epss 0.4%
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
IBM · OPENBMC
CVEs relacionadas — IBM OPENBMC

No mesmo produto, das mais perigosas para as menos.

CVE-2021-38960MEDIUMCVE-2021-38960EPSS 1.1%CVE-2021-38961MEDIUMCVE-2021-38961EPSS 0.7%CVE-2026-7868MEDIUMThis Power System update is being released to address incorrect authorizationEPSS 0.4%CVE-2026-8058MEDIUMThis Power System update is being released to address a sensitive information disclosureEPSS 0.4%CVE-2026-7254MEDIUMOpen BMC Denial of ServiceEPSS 0.2%CVE-2026-18857LOWThis Power System update is being released to addressEPSS 0.1%