CVE-2026-7254
published 2026-05-27CVE-2026-7254: IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users.
PriorityP425medium5.3CVSS 3.1
AVNACLPRNUINSUCNINAL
EPSS
0.24%
14.6th percentile
IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | openbmc | 1110.00 – 1110.11 | — |
| ibm | openbmc | FW1110.00 – FW1110.11 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM OpenBMC up to FW1110.11 improper validation of specified quantity in input
vuldb·2026-05-27·CVSS 5.3
CVE-2026-7254 [MEDIUM] IBM OpenBMC up to FW1110.11 improper validation of specified quantity in input
A vulnerability classified as problematic was found in IBM OpenBMC up to FW1110.11. The impacted element is an unknown function. The manipulation results in improper validation of specified quantity in input.
This vulnerability is known as CVE-2026-7254. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is advised.
GHSA
GHSA-rcmv-jxxq-ggjw: IBM OPENBMC FW1110
ghsa_unreviewed·2026-05-27
CVE-2026-7254 [MEDIUM] CWE-1284 GHSA-rcmv-jxxq-ggjw: IBM OPENBMC FW1110
IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-05-27
Published