Vulnerability Details CVE-2026-8058
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 10.8%
CVSS Severity
CVSS v3 Score 4.5
Products affected by CVE-2026-8058
-
cpe:2.3:h:ibm:power_system_e1050_(9043-mrx):-
-
cpe:2.3:h:ibm:power_system_e1150_(9043-mru):-
-
cpe:2.3:h:ibm:power_system_l1022_(9786-22h):-
-
cpe:2.3:h:ibm:power_system_l1024_(9786-42h):-
-
cpe:2.3:h:ibm:power_system_s1012_(9028-21b):-
-
cpe:2.3:h:ibm:power_system_s1014_(9105-41b):-
-
cpe:2.3:h:ibm:power_system_s1022_(9105-22a):-
-
cpe:2.3:h:ibm:power_system_s1022s_(9105-22b):-
-
cpe:2.3:h:ibm:power_system_s1024_(9105-42a):-
-
cpe:2.3:h:ibm:power_system_s1122_(9824-22a):-
-
cpe:2.3:h:ibm:power_system_s1124_(9824-42a):-
-
cpe:2.3:o:ibm:power_system_e1050_(9043-mrx)_firmware:fw1060.00
-
cpe:2.3:o:ibm:power_system_e1150_(9043-mru)_firmware:fw1110.00
-
cpe:2.3:o:ibm:power_system_l1022_(9786-22h)_firmware:fw1060.00
-
cpe:2.3:o:ibm:power_system_l1024_(9786-42h)_firmware:fw1060.00
-
cpe:2.3:o:ibm:power_system_l1124_(9856-42h)_firmware:fw1110.00
-
cpe:2.3:o:ibm:power_system_s1012_(9028-21b)_firmware:fw1060.00
-
cpe:2.3:o:ibm:power_system_s1014_(9105-41b)_firmware:fw1060.00
-
cpe:2.3:o:ibm:power_system_s1022s_(9105-22b)_firmware:fw1060.00
-
cpe:2.3:o:ibm:power_system_s1024_(9105-42a)_firmware:fw1060.00
-
cpe:2.3:o:ibm:power_system_s1114_(9824-41b)_firmware:fw1110.00
-
cpe:2.3:o:ibm:power_system_s1122_(9824-22a)_firmware:fw1110.00
-
cpe:2.3:o:ibm:power_system_s1122s_(9824-22b)_firmware:fw1110.00
-
cpe:2.3:o:ibm:power_system_s1124_(9824-42a)_firmware:fw1110.00