Privilege Escalation Vulnerability in IBM OPENBMC Firmware
CVE-2026-7868

6.5MEDIUM

Key Information:

Vendor

IBM

Status
Vendor
CVE Published:
28 July 2026

What is CVE-2026-7868?

A privilege escalation vulnerability has been identified in IBM OPENBMC Firmware, affecting various versions. This flaw allows ReadOnly users to escalate their privileges, enabling unauthorized access to administrator-level features. Organizations utilizing these affected firmware versions should prioritize updating their systems to mitigate potential security risks. The exploit may grant unprivileged users the ability to perform administrative functions, thus compromising system integrity and security. For further details and remediation steps, please consult the vendor advisory.

Affected Version(s)

OPENBMC FW1110.00

OPENBMC FW1060.00

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.