medium6.8
CVE-2026-18849
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process.
Impact
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Openbmc | from fw1060.00 through fw1060.80 |
| Ibm | Power System E1050 \(9043-Mrx\) Firmware | from fw1060.00 before fw1060.81 |
| Ibm | Power System L1022 \(9786-22h\) Firmware | from fw1060.00 before fw1060.81 |
| Ibm | Power System L1024 \(9786-42h\) Firmware | from fw1060.00 before fw1060.81 |
| Ibm | Power System S1012 \(9028-21b\) Firmware | from fw1060.00 before fw1060.81 |
| Ibm | Power System S1014 \(9105-41b\) Firmware | from fw1060.00 before fw1060.81 |
| Ibm | Power System S1022 \(9105-22a\) Firmware | from fw1060.00 before fw1060.81 |
| Ibm | Power System S1022s \(9105-22b\) Firmware | from fw1060.00 before fw1060.81 |
| Ibm | Power System S1024 \(9105-42a\) Firmware | from fw1060.00 before fw1060.81 |