CVE-2026-18849

Published: Aug 19, 2026Modified: Sep 2, 2026

6.8

Vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: psirt@us.ibm.com (Secondary)

Description

IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.

Affected (9)

Products: Ibm: Openbmc, Power System E1050 (9043 Mrx) Firmware, Power System L1022 (9786 22h) Firmware, Power System L1024 (9786 42h) Firmware, Power System S1012 (9028 21b) Firmware, Power System S1014 (9105 41b) Firmware, Power System S1022 (9105 22a) Firmware, Power System S1022s (9105 22b) Firmware, Power System S1024 (9105 42a) Firmware

Ibm

9 products

Openbmc

Power System E1050 (9043 Mrx) Firmware

Power System L1022 (9786 22h) Firmware

Power System L1024 (9786 42h) Firmware

Power System S1012 (9028 21b) Firmware

Power System S1014 (9105 41b) Firmware

Power System S1022 (9105 22a) Firmware

Power System S1022s (9105 22b) Firmware

Power System S1024 (9105 42a) Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Openbmc	From fw1060.00 to fw1060.80

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System E1050 (9043 Mrx) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System E1050 (9043 Mrx)	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System L1022 (9786 22h) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System L1022 (9786 22h)	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System L1024 (9786 42h) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System L1024 (9786 42h)	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1012 (9028 21b) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System S1012 (9028 21b)	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1014 (9105 41b) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System S1014 (9105 41b)	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1022 (9105 22a) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System S1022 (9105 22a)	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1022s (9105 22b) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System S1022s (9105 22b)	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1024 (9105 42a) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System S1024 (9105 42a)	All versions

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (1)

https://www.ibm.com/support/pages/node/7283590

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.