SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-8058

MEDIUM · CVSS 4.5 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-07-28 · Last synced 2026-08-27

CyberRota Analysis

AI-Generated

IBM OPENBMC firmware versions FW1110.00 to FW1110.20 and FW1060.00 to FW1060.71 are vulnerable to a flaw that allows users to submit a password during a resource dump request, which is then logged in the BMC audit log accessible to admin users. This could lead to unauthorized access if sensitive passwords are exposed. Organizations using these firmware versions should prioritize remediation to mitigate potential security risks associated with password leakage.

CVE
CVE-2026-8058
Severity
MEDIUM
CVSS
4.5
EPSS
0.21%

Original NVD Description

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-87958 HIGH CVE-2026-86093 HIGH CVE-2026-86087 MEDIUM CVE-2026-82107 CRITICAL CVE-2026-82100 CRITICAL CVE-2026-82099 HIGH