Critical severity9.8NVD Advisory· Published Sep 4, 2026· Updated Sep 4, 2026

CVE-2026-85508

Description

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).

Affected products

FreeIPMI/FreeIPMIllm-fuzzy
Range: <1.6.19

Patches

Vulnerability mechanics

References

ftp.gnu.org/gnu/freeipmi/freeipmi-1.6.19.tar.gznvd
www.gnu.org/software/freeipmi/nvd
www.openwall.com/lists/oss-security/2026/08/28/5nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000