Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:openbmc:fw1110.20.0:*:*:*:*:*:*:*

part: a version: fw1110.20.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductOpenbmc (22e92651-325a-5712-b659-687ee7fec196)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7868 vulnerable 2026-09-16 04:34:09.911026 This Power System update is being released to address incorrect authorization
MEDIUM (6.5)
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges.
Published: 2026-07-28T15:59:21.082Z
Updated: 2026-07-28T17:36:01.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8058 vulnerable 2026-09-16 04:32:58.212921 This Power System update is being released to address a sensitive information disclosure
MEDIUM (4.5)
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.
Published: 2026-07-28T15:56:27.745Z
Updated: 2026-07-28T19:31:28.603Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.