CVE Feed

    Dashboard / CVE / CVE-2026-18857

    CVE-2026-18857

    IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.

    Published:Sep 24, 2026
    Last Modified:Sep 30, 2026
    EPS:Sep 24, 2026
    EPSS Score:0.00107
    CVSS Score:3.4

    Affected Products

    Vendor
    Ibm
    Product
    Openbmc
    Vendor
    Ibm
    Product
    Power System E1050 \(9043-mrx\)
    Vendor
    Ibm
    Product
    Power System E1050 \(9043-mrx\) Firmware
    Vendor
    Ibm
    Product
    Power System E1150 \(9043-mru\)
    Vendor
    Ibm
    Product
    Power System E1150 \(9043-mru\) Firmware
    Vendor
    Ibm
    Product
    Power System L1022 \(9786-22h\)
    Vendor
    Ibm
    Product
    Power System L1022 \(9786-22h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1024 \(9786-42h\)
    Vendor
    Ibm
    Product
    Power System L1024 \(9786-42h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1122 \(9856-22h\)
    Vendor
    Ibm
    Product
    Power System L1122 \(9856-22h\) Firmware
    Vendor
    Ibm
    Product
    Power System L1124 \(9856-42h\)
    Vendor
    Ibm
    Product
    Power System L1124 \(9856-42h\) Firmware
    Vendor
    Ibm
    Product
    Power System S1012 \(9028-21b\)
    Vendor
    Ibm
    Product
    Power System S1012 \(9028-21b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1014 \(9105-41b\)
    Vendor
    Ibm
    Product
    Power System S1014 \(9105-41b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1022 \(9105-22a\)
    Vendor
    Ibm
    Product
    Power System S1022 \(9105-22a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1022s \(9105-22b\)
    Vendor
    Ibm
    Product
    Power System S1022s \(9105-22b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1024 \(9105-42a\)
    Vendor
    Ibm
    Product
    Power System S1024 \(9105-42a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21b\)
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21t\)
    Vendor
    Ibm
    Product
    Power System S1112 \(9242-21t\) Firmware
    Vendor
    Ibm
    Product
    Power System S1114 \(9824-41b\)
    Vendor
    Ibm
    Product
    Power System S1114 \(9824-41b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1122 \(9824-22a\)
    Vendor
    Ibm
    Product
    Power System S1122 \(9824-22a\) Firmware
    Vendor
    Ibm
    Product
    Power System S1122s \(9824-22b\)
    Vendor
    Ibm
    Product
    Power System S1122s \(9824-22b\) Firmware
    Vendor
    Ibm
    Product
    Power System S1124 \(9824-42a\)
    Vendor
    Ibm
    Product
    Power System S1124 \(9824-42a\) Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2026-18849 (CVSS 6.8) — IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An …
    CVE-2026-7868 (CVSS 6.5) — IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate pri…
    CVE-2026-8058 (CVSS 4.5) — IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password wi…
    CVE-2026-7254 (CVSS 5.3) — IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network …
    CVE-2024-35124 (CVSS 7.5) — A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, …
    CVE-2024-31916 (CVSS 7.5) — IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High