Dashboard / CVE-2026-7868

CVE-2026-7868

HIGH
MEDIUM Priority: 0.03 BB Relevance: 68/100
Published: 2026-07-28 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges.

Weakness Classification (1)

Affected Software (15)

VendorProductVersion
ibm power_system_e1050_\(9043-mrx\)_firmware fw1060.00 – fw1060.72
ibm power_system_e1150_\(9043-mru\)_firmware fw1110.00 – fw1110.30
ibm power_system_l1022_\(9786-22h\)_firmware fw1060.00 – fw1060.72
ibm power_system_l1024_\(9786-42h\)_firmware fw1060.00 – fw1060.72
ibm power_system_l1122_\(9856-22h\)_firmware fw1110.00 – fw1110.30
ibm power_system_l1124_\(9856-42h\)_firmware fw1110.00 – fw1110.30
ibm power_system_s1012_\(9028-21b\)_firmware fw1060.00 – fw1060.72
ibm power_system_s1014_\(9105-41b\)_firmware fw1060.00 – fw1060.72
ibm power_system_s1022_\(9105-22a\)_firmware fw1060.00 – fw1060.72
ibm power_system_s1022s_\(9105-22b\)_firmware fw1060.00 – fw1060.72
ibm power_system_s1024_\(9105-42a\)_firmware fw1060.00 – fw1060.72
ibm power_system_s1114_\(9824-41b\)_firmware fw1110.00 – fw1110.30
ibm power_system_s1122_\(9824-22a\)_firmware fw1110.00 – fw1110.30
ibm power_system_s1122s_\(9824-22b\)_firmware fw1110.00 – fw1110.30
ibm power_system_s1124_\(9824-42a\)_firmware fw1110.00 – fw1110.30

References & Advisories (1)

Bug Bounty Relevance

68 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.37%
Raw Score 0.003670
Percentile 30.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00367
2026-10-28
0.00367

Intelligence Sources

nvd ref →

External Links