Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-18849

IBM OpenBMC Code Execution

Description

IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM OPENBMC

  • FW1060.00 to ≤ FW1060.80affected

References