Tag
#IPMI
Understanding and Defending Against CVE-2026-85504: A Critical Stack-Based Buffer Overflow in FreeIPMI
CVE-2026-85504 is a critical stack-based buffer overflow vulnerability in FreeIPMI, a software for managing and monitoring IPMI-enabled devices. This vulnerability, with a CVSS score of 9.8, allows remote attackers to execute arbitrary code on affected systems. The vulnerability exists in the _ipmi_sel_oem_fujitsu_get_sel_entry_long_text function and is triggered by malformed Fujitsu SEL long-text responses. Understanding and defending against this vulnerability is crucial for maintaining the security of IPMI-enabled devices.
Critical Vulnerability in OpenStack Ironic: CVE-2026-54423
A critical vulnerability (CVE-2026-54423) has been discovered in OpenStack Ironic, allowing an authenticated user to send arbitrary IPMI commands to a node, bypassing access control. This vulnerability has a CVSS score of 8.2 and affects multiple versions of OpenStack Ironic. Immediate patching is recommended to prevent potential exploitation.