MEDIUMCVSS 4.5Vulnerability

CVE-2026-8058

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

Properties

severity
MEDIUM
cvss_severity
MEDIUM
cvss_score
4.5
epss_score
0.00358
retrieved_at
2026-10-09T15:44:39+00:00
last_source
FIRST EPSS
score
4.5
cve_id
CVE-2026-8058
cvss_vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
signal_observed_at
2026-09-11T17:55:57+00:00
vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
published_at
2026-07-28T16:20:21.987
last_modified
2026-08-26T14:30:01.933
epss_percentile
0.2751

Related Entities (33)

ENRICHED_BY (1)

→[Source]FIRST EPSS

DESCRIBED_BY (1)

→[Source]NVD

AFFECTS_PRODUCT (30)

→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]
→[Product]

HAS_WEAKNESS (1)

→[Weakness]Exposure of Sensitive Information to an Unauthorized Actor

Explore deeper with Ninja Signal's threat intelligence graph