Skip to contentOpenbmc Project Openbmc vulnerabilities
- ibm openbmc, power hardware management console +1 moreThis Power System update is being released to addressCVE-2026-174276.5 Medium
- ibm openbmcThis Power System update is being released to addressCVE-2026-174266.5 Medium
- ibm openbmc, power hardware management console +1 moreThis Power System update is being released to addressCVE-2026-166976.5 Medium
- ibm hardware management console, openbmc +1 moreThis Power System update is being released to addressCVE-2026-166826.5 Medium
- huawei openbmcHuawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responsesCVE-2026-652003.5 Low
- huawei openbmcHuawei openUBMC low-privilege SNMP to administrator privilege escalationCVE-2026-651995.4 Medium
- ibm openbmc, power system e1050 \(9043-mrx\) firmware, power system e1150 \(9043-mru\) firmware +15 more +17 moreThis Power System update is being released to addressCVE-2026-188573.4 Low
- ibm openbmc, power system e1050 \(9043-mrx\) firmware, power system l1022 \(9786-22h\) firmware +6 more +8 moreIBM OpenBMC Code ExecutionCVE-2026-188496.8 Medium
- ibm openbmc, power system e1050 \(9043-mrx\) firmware, power system e1150 \(9043-mru\) firmware +13 more +15 moreThis Power System update is being released to address incorrect authorizationCVE-2026-78686.5 Medium
- ibm openbmc, power system e1050 \(9043-mrx\) firmware, power system e1150 \(9043-mru\) firmware +13 more +15 moreThis Power System update is being released to address a sensitive information disclosureCVE-2026-80584.5 Medium
- ibm openbmcOpen BMC Denial of ServiceCVE-2026-72545.3 Medium
- ibm openbmcIBM OpenBMC authentication bypassCVE-2024-351247.5 High
- ibm openbmcIBM OpenBMC information disclosureCVE-2024-319167.5 High
- openbmc project openbmcOut of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may...CVE-2022-357297.5 High
- intel openbmcImproper input validation in firmware for OpenBMC in some Intel(R) platforms before versions egs...CVE-2022-294946.5 Medium
- ibm openbmc, power system ac922 \(8335-gtg\) firmware, power system ac922 \(8335-gth\) firmware +1 more +3 moreIBM OpenBMC denial of serviceCVE-2022-224884.9 Medium
- openbmc project openbmcUnauthenticated out of bounds stack write in bmcwebCVE-2022-34098.2 High
- openbmc project openbmcUnauthenticated out of bounds heap write in bmcwebCVE-2022-28098.2 High
- ibm openbmc, hmc, power hardware management console \(7063-cr2\) firmware +2 more +4 moreIBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive...CVE-2021-389605.3 Medium
- ibm openbmc, power system ac922 \(8335-gtc\) firmware, power system ac922 \(8335-gtg\) firmware +1 more +3 moreIBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed...CVE-2021-389616.1 Medium