CVE-2026-18849 — IBM OpenBMC Code Execution

CVE-2026-18849

IBM OpenBMC Code Execution PUBLISHED

Description (CNA)

IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.

Affected (CNA)

Vendor / product	Versions
IBM / OPENBMC	affected FW1060.00 through FW1060.80

CWE

CWE-22

References

https://www.ibm.com/support/pages/node/7283590

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.