CVE-2026-8058 — This Power System update is being released to address a sensitive information disclosure

CVE-2026-8058

This Power System update is being released to address a sensitive information disclosure PUBLISHED

Description (CNA)

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

Affected (CNA)

Vendor / product	Versions
IBM / OPENBMC	affected FW1110.00 through FW1110.20; affected FW1060.00 through FW1060.71

CWE

CWE-200

References

https://www.ibm.com/support/pages/node/7280642

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.