openBMC vulnerabilities
CVEs whose affected-version data names the openBMC package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-65200Low· 3.5The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract a fixed header or reserved-field size from a device-supp…
The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract a fixed header or reserved-field size from a device-supp…
▾ SunlitHuawei · openBMCEPSS 0.14%via NVD
CVE-2026-65199Medium· 5.4openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers
openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account…
▾ SunlitHuawei · openBMCEPSS 0.15%via NVD