CVE-2026-8058

MEDIUM

This Power System update is being released to address a sensitive information disclosure

Title source: cna

Description

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory patch

https://www.ibm.com/support/pages/node/7280642

Scores

CVSS v3 4.5

EPSS 0.0036

EPSS Percentile 28.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-200

Status published

Products (2)

IBM/OPENBMC FW1060.00 - FW1060.71

IBM/OPENBMC FW1110.00 - FW1110.20

Published Jul 28, 2026

Tracked Since Jul 28, 2026