Is CVE-2026-7868 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-7868 being exploited in the wild.

How severe is CVE-2026-7868?

Medium severity, with a CVSS score of 6.5, published 28 July 2026.

Which products and versions are affected?

IBM OpenBMC FW1060 FW1060.00 through FW1060.71; IBM OPENBMC FW1110 FW1110.00 through FW1110.20.

Is there a fix for CVE-2026-7868?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-7868 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-7868?

Check whether you run IBM OpenBMC FW1060 or IBM OPENBMC FW1110 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-7868: IBM OpenBMC privilege escalation in HTTPS interface

CVE-2026-7868 · Severity: medium · CVSS 6.5 · Published 2026-07-28

IBM OpenBMC firmware, used to manage Power Systems hardware, contains a security flaw that allows users with restricted 'ReadOnly' access to increase their own permissions. An attacker with low-level credentials could exploit this to gain full administrator control over the Baseboard Management Controller (BMC). This could allow them to modify system settings or disrupt server operations.

Technologies: IBM OPENBMC FW1110. Vendors: IBM.

Quick answers

Is CVE-2026-7868 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-7868 being exploited in the wild.
How severe is CVE-2026-7868?: Medium severity, with a CVSS score of 6.5, published 28 July 2026.
Which products and versions are affected?: IBM OpenBMC FW1060 FW1060.00 through FW1060.71; IBM OPENBMC FW1110 FW1110.00 through FW1110.20.
Is there a fix for CVE-2026-7868?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-7868 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-7868?: Check whether you run IBM OpenBMC FW1060 or IBM OPENBMC FW1110 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An incorrect authorization vulnerability (CWE-863) exists in the IBM OpenBMC HTTPS interface. The flaw allows an authenticated user with 'ReadOnly' privileges to bypass intended access controls and grant themselves 'Administrator' privileges. The vulnerability affects firmware versions FW1110.00 through FW1110.20 and FW1060.00 through FW1060.71 on IBM Power 10 and Power 11 systems. Attackers can exploit this over the network without user interaction, provided they have valid low-privileged credentials. IBM has released firmware updates FW1110.30 and FW1060.72/FW1060.80 to remediate the issue.

Affected products

IBM OpenBMC FW1110 FW1110.00 through FW1110.20
IBM OpenBMC FW1060 FW1060.00 through FW1060.71

Timeline

2026-07-21: disclosed: Initial publication by IBM
2026-07-28: advisory: NVD publication date

References

https://www.ibm.com/support/pages/node/7280641

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.