CVE-2026-50031

ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Two subcommands "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text" were found to have exploitable buffer overflows on response messages.

• CWE-121

• https://lists.gnu.org/archive/html/info-gnu/2026-06/msg00000.html
• https://savannah.gnu.org/bugs/index.php?68363
• https://savannah.gnu.org/bugs/index.php?68364

Published

Jun 3, 2026

Last Modified

Jul 22, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-50020Netty is a network application framework for development of …5.3
• CVE-2026-50021pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm…8.1
• CVE-2026-50023yt-dlp is a command-line audio/video downloader. Prior to 20…9.6
• CVE-2026-50026Frappe is a full-stack web application framework. Prior to v…6.9
• CVE-2026-5003A vulnerability was found in PromtEngineer localGPT up to 4d…5.5
• CVE-2026-50030DataEase is an open source data visualization and analysis t…7.1
• CVE-2026-50032A NULL pointer dereference in the MMS Write Named Variable L…8.7
• CVE-2026-50033Local privilege escalation due to DLL hijacking vulnerabilit…7.3
• CVE-2026-50034An attacker within BLE communication range can passively int…7.1
• CVE-2026-50039The affected product is vulnerable to a stack-based buffer o…8.7
• CVE-2026-5004A vulnerability was determined in Wavlink WL-WN579X3-C 23112…8.8
• CVE-2026-50040Storage Concentrator (SC & SCVM) is vulnerable to reflected …6.1