IBM OPENBMC

• CVE-2026-18857 Low 3.4 This Power System update is being released to address 0.1%
• CVE-2026-18849 Medium 6.8 IBM OpenBMC Code Execution 0.4%
• CVE-2026-7868 Medium 6.5 This Power System update is being released to address incorrect authorization 0.4%
• CVE-2026-8058 Medium 4.5 This Power System update is being released to address a sensitive information disclosure 0.4%
• CVE-2026-7254 Medium 5.3 Open BMC Denial of Service 0.2%
• CVE-2024-35124 High 7.5 IBM OpenBMC authentication bypass 0.5%
• CVE-2024-31916 High 7.5 IBM OpenBMC information disclosure 0.5%
• CVE-2022-22488 Medium 4.9 IBM OpenBMC denial of service 0.5%
• CVE-2021-38960 Medium 5.3 IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047. 1.1%
• CVE-2021-38961 Medium 6.1 IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading t 0.7%