OpenBMC
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| phosphor-net-ipmid | 2 | – | Sep 15, 2026 |
| slpd-lite | 1 | – | Jul 31, 2024 |
Exploited and recent CVEs
- CVE-2026-16141 OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Value 0.5%
- CVE-2026-16140 OpenBMC IPMI Privilege Escalation via Retargeted RAKP 1 0.4%
- CVE-2024-41660 slpd-lite unauthenticated memory corruption 0.9%