SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-18849

MEDIUM · CVSS 6.8 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-08-19 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

IBM OpenBMC firmware versions FW1060.00 through FW1060.80 contain a vulnerability in the firmware update process that allows an authenticated administrator-level attacker to execute arbitrary code under certain conditions. This could compromise the confidentiality, integrity, and availability of the system. Organizations using affected versions should prioritize remediation to mitigate potential risks associated with this vulnerability.

CVE
CVE-2026-18849
Severity
MEDIUM
CVSS
6.8
EPSS
0.24%

Original NVD Description

IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.

Related CVEs

Other vulnerabilities affecting the same vendor(s)