CVE-2026-18849
MediumCVSS 6.8Summary
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access can execute arbitrary code under specific conditions, impacting confidentiality, integrity, and availability.
Risk Assessment
Risk of BMC takeover, potentially leading to full compromise of the hardware management system and security breach of the entire infrastructure.
Recommendation
Apply available BMC firmware updates from IBM and restrict administrative access to BMC to trusted personnel only.
Original NVD description (English source)
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.