High severityNVD Advisory· Published Sep 11, 2026· Updated Oct 14, 2026

CVE-2025-15679

Description

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.

Affected products

BullSequana/BullSequana XH3406 and XH3515llm-create

Patches

Vulnerability mechanics

References

myatos.my.site.com/psmcustomer/s/contentdocument/069ci00000eNzLYAA0nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000