CVE-2026-8058

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

Score

CVSS 3.1 4.9 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2026-07-28

Last modified

2026-10-24

Weaknesses

CWE-200

Affected products

• Openbmc (Ibm)
• Power System E1050 (9043-mrx) Firmware (Ibm)
• Power System E1150 (9043-mru) Firmware (Ibm)
• Power System L1022 (9786-22h) Firmware (Ibm)
• Power System L1024 (9786-42h) Firmware (Ibm)
• Power System L1122 (9856-22h) Firmware (Ibm)
• Power System L1124 (9856-42h) Firmware (Ibm)
• Power System S1012 (9028-21b) Firmware (Ibm)
• Power System S1014 (9105-41b) Firmware (Ibm)
• Power System S1022 (9105-22a) Firmware (Ibm)
• Power System S1022s (9105-22b) Firmware (Ibm)
• Power System S1024 (9105-42a) Firmware (Ibm)
• Power System S1114 (9824-41b) Firmware (Ibm)
• Power System S1122 (9824-22a) Firmware (Ibm)
• Power System S1122s (9824-22b) Firmware (Ibm)
• Power System S1124 (9824-42a) Firmware (Ibm)

References

• https://www.ibm.com/support/pages/node/7280642