openUBMC vulnerabilities

CVEs whose affected-version data names the openUBMC package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-65198High· 8.6

2w ago

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from,…

▾ TwilightHuawei · openUBMCEPSS 0.19%via NVD