Openbmc IBM Openbmc

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in IBM Openbmc.

By the Year

In 2026 there have been 1 vulnerability in IBM Openbmc with an average score of 5.3 out of ten. Openbmc did not have any published security vulnerabilities last year. That is, 1 more vulnerability have already been reported in 2026 as compared to last year.

Year Vulnerabilities Average Score
2026 1 5.30
2025 0 0.00
2024 2 7.50

It may take a day or so for new Openbmc vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent IBM Openbmc Security Vulnerabilities

IBM OPENBMC FW1110.001110.11 DoS via unauthenticated network
CVE-2026-7254 5.3 - Medium - May 27, 2026

IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users.

Improper Validation of Specified Quantity in Input

OpenBMC default pwd/session flaw: admin access (FW1020-60, FW1030-50, FW1050-10)
CVE-2024-35124 7.5 - High - August 13, 2024

A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrative access to the BMC. IBM X-Force ID: 290674.

Missing Authentication for Critical Function

IBM OpenBMC FW1050.00FW1050.10 BMCWeb HTTPS Auth Bypass
CVE-2024-31916 7.5 - High - June 27, 2024

IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026.

Missing Authentication for Critical Function

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for IBM Openbmc or by IBM? Click the Watch button to subscribe.

IBM
Vendor

IBM Openbmc
Product

subscribe