Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Two subcommands "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text" were found to have exploitable buffer overflows on response messages.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-03 | 1 | Disclosure1 |
| 2026-06-05 | 1 | Patch1 |
| 2026-06-09 | 1 | Patch1 |
| 2026-09-11 | 1 | Disclosure1 |
FreeIPMI CVE-2026-50031: buffer overflows in ipmi-oem tool. Compromised BMC sends crafted response, corrupts admin workstation memory. Management plane vulnerability - patch to 1.6.18. https://nvd.nist.gov/vuln/detail/CVE-2026-50031
Post summary
FreeIPMI CVE-2026-50031 is a buffer overflow in the ipmi-oem tool that can corrupt admin workstation memory via a crafted BMC response. A patch to version 1.6.18 is available to remediate the issue.
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions). https://t.co/trQjRK5ocB
Post summary
The tweet discloses a stack-based buffer over‑read vulnerability in FreeIPMI versions prior to 1.6.19, distinct from CVE‑2026‑50031, without providing PoC, exploit details, or patch information.
🪟 Server management still gets treated like “set it and forget it” until boom: FreeIPMI ipmi-oem buffer overflow. Windows or Linux, your BMC/OEM layer is everyone’s emergency exit. #Windows #Microsoft #FreeIPMI #Security #BMC #CVE https://windowsforum.com/threads/cve-2026-50031-freeipmi-fix-ipmi-oem-dell-fujitsu-oem-buffer-overflow.423997/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #FreeipmiVulnerability https://t.co/uhNQpOmBKM
Post summary
The tweet highlights CVE‑2026‑50031, a buffer‑overflow vulnerability in FreeIPMI's ipmi‑OEM layer, and references a forum thread that includes a fix, with no mention of PoC or active exploitation.
CVE-2026-50031 Buffer Overflow Vulnerabilities in FreeIPMI ipmi-oem Before 1.16.18 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-50031
Post summary
The text announces CVE-2026-50031, describing a buffer overflow in FreeIPMI ipmi-oem versions prior to 1.16.18. No proof‑of‑concept, exploit, active exploitation, or patch information is provided.