Skip to content
CVE PROGRAM SOURCE RECORD3.4 Low

CVE-2026-18857

This Power System update is being released to address

Description

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM OPENBMC

  • FW1120.00 to ≤ FW1120.01affected
  • FW1110.00 to ≤ FW1110.31affected
  • FW1060.00 to ≤ FW1060.81affected

References