Advisories · Technology

IBM OPENBMC.

Every CVE that names IBM OPENBMC among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18857 CVE record

CVSS 3.4 Low

This Power System update is being released to address
- IBM OPENBMC
- Memory corruption
Not analysed yet 24 Sept 2026
CVE-2026-18849 CVE record

CVSS 6.8 Medium

IBM OpenBMC Code Execution
- IBM OPENBMC
- Path traversal
Not analysed yet 19 Aug 2026
CVE-2026-7868 CVE record

CVSS 6.5 Medium

This Power System update is being released to address incorrect authorization
- IBM OPENBMC
- Broken access control
Not analysed yet 28 Jul 2026
CVE-2026-8058 CVE record

CVSS 4.5 Medium

This Power System update is being released to address a sensitive information disclosure
- IBM OPENBMC
- Information disclosure
Not analysed yet 28 Jul 2026
CVE-2026-7254 CVE record

CVSS 5.3 Medium

Open BMC Denial of Service
- IBM OPENBMC
- CWE-1284
Not analysed yet 27 May 2026
CVE-2024-35124 CVE record

CVSS 7.5 High

IBM OpenBMC authentication bypass
- IBM OpenBMC
- Authentication bypass
Not analysed yet 13 Aug 2024
CVE-2024-31916 CVE record

CVSS 7.5 High

IBM OpenBMC information disclosure
- IBM OpenBMC
- Authentication bypass
Not analysed yet 27 Jun 2024
CVE-2022-22488 CVE record

CVSS 4.9 Medium

IBM OpenBMC denial of service
- IBM OpenBMC
- Denial of service
Not analysed yet 18 Nov 2022
CVE-2021-38960 CVE record

CVSS 5.3 Medium

IBM OPENBMC: IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain…
- IBM OPENBMC
- IBM HMC
Not analysed yet 4 Feb 2022
CVE-2021-38961 CVE record

CVSS 6.1 Medium

IBM OPENBMC OP910 is vulnerable to cross-site scripting.
- IBM OPENBMC
Not analysed yet 27 Dec 2021