CVE-2026-18849
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access can execute arbitrary code under specific conditions, impacting confidentiality, integrity, and availability.
Risk Assessment
Risk of BMC takeover, potentially leading to full compromise of the hardware management system and security breach of the entire infrastructure.
Recommendation
Apply available BMC firmware updates from IBM and restrict administrative access to BMC to trusted personnel only.
Other vulnerabilities in IBM OpenBMC
See all- CVE-2026-18857Low
IBM OPENBMC versions FW1120.00-FW1120.01, FW1110.00-FW1110.31, and FW1060.00-FW1060.81 are affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.
- CVE-2026-8058Medium
IBM OpenBMC versions FW1110.00 through FW1110.20 and FW1060.00 through FW1060.71 allow a user to supply a password with a resource dump request, which is then stored in the BMC audit log where an admin user can see it.
- CVE-2026-7868Medium
IBM OpenBMC versions FW1110.00 through FW1110.20 and FW1060.00 through FW1060.71 allow ReadOnly users to escalate privileges and give themselves administrator privileges.
Original NVD description (English source)
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS