CVE-2026-18857

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-18857
IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.

3.4 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/7289253 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1122_\(9824-22a\):-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1124_\(9824-42a\):-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1122s_\(9824-22b\):-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1114_\(9824-41b\):-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
OR cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1122_\(9856-22h\):-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
OR cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1124_\(9856-42h\):-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
OR cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e1150_\(9043-mru\):-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:ibm:power_system_s1112_\(9242-21b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1112_\(9242-21b\):-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:ibm:power_system_s1112_\(9242-21t\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1112_\(9242-21t\):-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:ibm:power_system_s1022_\(9105-22a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1022_\(9105-22a\):-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:ibm:power_system_s1024_\(9105-42a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1024_\(9105-42a\):-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:ibm:power_system_s1022s_\(9105-22b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1022s_\(9105-22b\):-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:ibm:power_system_s1014_\(9105-41b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1014_\(9105-41b\):-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:ibm:power_system_l1022_\(9786-22h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1022_\(9786-22h\):-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:ibm:power_system_l1024_\(9786-42h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1024_\(9786-42h\):-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:ibm:power_system_e1050_\(9043-mrx\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e1050_\(9043-mrx\):-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:ibm:power_system_s1012_\(9028-21b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1012_\(9028-21b\):-:*:*:*:*:*:*:*
History

30 Sep 2026, 16:48

Type Values Removed Values Added
CPE cpe:2.3:h:ibm:power_system_s1022_\(9105-22a\):-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1112_\(9242-21b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1024_\(9105-42a\):-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1024_\(9105-42a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1022s_\(9105-22b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1014_\(9105-41b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1022_\(9105-22a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1122s_\(9824-22b\):-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1012_\(9028-21b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1124_\(9824-42a\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1012_\(9028-21b\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1112_\(9242-21t\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1014_\(9105-41b\):-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_l1022_\(9786-22h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1112_\(9242-21b\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e1150_\(9043-mru\):-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_e1050_\(9043-mrx\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1124_\(9856-42h\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1022_\(9786-22h\):-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_l1024_\(9786-42h\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1024_\(9786-42h\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e1050_\(9043-mrx\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1122_\(9856-22h\):-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1022s_\(9105-22b\):-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power_system_s1112_\(9242-21t\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1122_\(9824-22a\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1114_\(9824-41b\):-:*:*:*:*:*:*:*
First Time Ibm power System S1122 \(9824-22a\) Firmware
Ibm power System S1112 \(9242-21t\)
Ibm power System L1024 \(9786-42h\) Firmware
Ibm power System S1012 \(9028-21b\) Firmware
Ibm power System L1124 \(9856-42h\) Firmware
Ibm
Ibm power System S1114 \(9824-41b\) Firmware
Ibm power System L1124 \(9856-42h\)
Ibm power System S1012 \(9028-21b\)
Ibm power System L1022 \(9786-22h\)
Ibm power System S1122 \(9824-22a\)
Ibm power System E1050 \(9043-mrx\)
Ibm power System S1122s \(9824-22b\)
Ibm power System E1150 \(9043-mru\)
Ibm power System S1112 \(9242-21b\)
Ibm power System S1122s \(9824-22b\) Firmware
Ibm power System S1014 \(9105-41b\) Firmware
Ibm power System S1112 \(9242-21b\) Firmware
Ibm power System L1122 \(9856-22h\) Firmware
Ibm power System S1024 \(9105-42a\) Firmware
Ibm power System S1022 \(9105-22a\)
Ibm power System S1124 \(9824-42a\) Firmware
Ibm power System E1050 \(9043-mrx\) Firmware
Ibm power System S1022s \(9105-22b\) Firmware
Ibm power System S1124 \(9824-42a\)
Ibm power System E1150 \(9043-mru\) Firmware
Ibm power System L1022 \(9786-22h\) Firmware
Ibm power System S1114 \(9824-41b\)
Ibm power System S1022 \(9105-22a\) Firmware
Ibm power System S1014 \(9105-41b\)
Ibm power System S1024 \(9105-42a\)
Ibm power System S1112 \(9242-21t\) Firmware
Ibm power System L1122 \(9856-22h\)
Ibm power System L1024 \(9786-42h\)
Ibm power System S1022s \(9105-22b\)
References () https://www.ibm.com/support/pages/node/7289253 - () https://www.ibm.com/support/pages/node/7289253 - Patch, Vendor Advisory

24 Sep 2026, 14:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-09-24 14:17

Updated : 2026-09-30 16:48

NVD link : CVE-2026-18857

Mitre link : CVE-2026-18857

CVE.ORG link : CVE-2026-18857

JSON object : View

Products Affected

ibm

  • power_system_l1024_\(9786-42h\)
  • power_system_s1112_\(9242-21b\)
  • power_system_s1122_\(9824-22a\)
  • power_system_l1124_\(9856-42h\)
  • power_system_s1122_\(9824-22a\)_firmware
  • power_system_s1124_\(9824-42a\)_firmware
  • power_system_e1050_\(9043-mrx\)
  • power_system_s1024_\(9105-42a\)
  • power_system_e1050_\(9043-mrx\)_firmware
  • power_system_l1024_\(9786-42h\)_firmware
  • power_system_s1114_\(9824-41b\)
  • power_system_s1122s_\(9824-22b\)
  • power_system_l1022_\(9786-22h\)
  • power_system_s1024_\(9105-42a\)_firmware
  • power_system_e1150_\(9043-mru\)
  • power_system_s1114_\(9824-41b\)_firmware
  • power_system_l1022_\(9786-22h\)_firmware
  • power_system_s1022_\(9105-22a\)
  • power_system_s1112_\(9242-21t\)
  • power_system_s1112_\(9242-21b\)_firmware
  • power_system_s1014_\(9105-41b\)_firmware
  • power_system_l1122_\(9856-22h\)
  • power_system_e1150_\(9043-mru\)_firmware
  • power_system_s1124_\(9824-42a\)
  • power_system_l1124_\(9856-42h\)_firmware
  • power_system_s1012_\(9028-21b\)
  • power_system_l1122_\(9856-22h\)_firmware
  • power_system_s1112_\(9242-21t\)_firmware
  • power_system_s1014_\(9105-41b\)
  • power_system_s1122s_\(9824-22b\)_firmware
  • power_system_s1022_\(9105-22a\)_firmware
  • power_system_s1012_\(9028-21b\)_firmware
  • power_system_s1022s_\(9105-22b\)_firmware
  • power_system_s1022s_\(9105-22b\)
CWE
CWE-125

Out-of-bounds Read