Vulnerability Details CVE-2026-18849
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 15.0%
CVSS Severity
CVSS v3 Score 6.8
Products affected by CVE-2026-18849
-
cpe:2.3:h:ibm:power_system_e1050_(9043-mrx):-
-
cpe:2.3:h:ibm:power_system_l1022_(9786-22h):-
-
cpe:2.3:h:ibm:power_system_s1012_(9028-21b):-
-
cpe:2.3:h:ibm:power_system_s1014_(9105-41b):-
-
cpe:2.3:h:ibm:power_system_s1022_(9105-22a):-
-
cpe:2.3:h:ibm:power_system_s1022s_(9105-22b):-
-
cpe:2.3:h:ibm:power_system_s1024_(9105-42a):-
-
cpe:2.3:o:ibm:openbmc:*
-
cpe:2.3:o:ibm:power_system_e1050_(9043-mrx)_firmware:fw1060.00
-
cpe:2.3:o:ibm:power_system_e1050_(9043-mrx)_firmware:fw1060.72
-
cpe:2.3:o:ibm:power_system_s1012_(9028-21b)_firmware:fw1060.00
-
cpe:2.3:o:ibm:power_system_s1012_(9028-21b)_firmware:fw1060.72
-
cpe:2.3:o:ibm:power_system_s1014_(9105-41b)_firmware:fw1060.00
-
cpe:2.3:o:ibm:power_system_s1014_(9105-41b)_firmware:fw1060.72
-
cpe:2.3:o:ibm:power_system_s1022_(9105-22a)_firmware:fw1060.00
-
cpe:2.3:o:ibm:power_system_s1022_(9105-22a)_firmware:fw1060.72
-
cpe:2.3:o:ibm:power_system_s1022s_(9105-22b)_firmware:fw1060.00
-
cpe:2.3:o:ibm:power_system_s1022s_(9105-22b)_firmware:fw1060.72