CVE-2026-18849 — IBM OpenBMC Code Execution
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC c…
Published: 2026-08-19 · CVSS: 6.8 · CVSS 3.1
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7