phosphor-net-ipmid vulnerabilities

2 known vulnerabilities in phosphor-net-ipmid from OpenBMC. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  phosphor-net-ipmid: Use of Uninitialized Variable

  CVE-2026-16141Sep 15, 2026OpenBMC

  OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defaults. The IPMI service then accepts a RA

• 8.8 High severity

  phosphor-net-ipmid: Incorrect Authorization

  CVE-2026-16140Sep 15, 2026OpenBMC

  OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a logic flaw where the authorization context of an existing session can be replaced with a target account while still maintaining the original integrity and encryption keys. Several downstream