CVE-2026-8058
Medium · 4.5CVSS
4.5
EPSS
0.4%
Published
Jul 28, 2026
CISA due date
—
The record
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-62979 jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. CWE-200
- CVE-2026-55098 Arc is an open, SQL-native time-series database for telemetry. CWE-200
- CVE-2026-119331 Ladybird is a truly independent web browser. CWE-200
- CVE-2026-62264 PDF Reader MCP is a Model Context Protocol server for reading PDF documents. CWE-200
- CVE-2026-110305 The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive… CWE-200
- CVE-2026-61730 SOCFortress CoPilot focuses on providing a single pane of glass for all your security… CWE-200
- CVE-2026-119570 Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure… CWE-200
- CVE-2026-14467 An information disclosure vulnerability in the Forocoches comments editor that allows an… CWE-200