CVE-2026-50031
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-50031
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Two subcommands "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text" were found to have exploitable buffer overflows on response messages.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
栈缓冲区溢出
Source: NVD (National Vulnerability Database)
Vulnerability Title
FreeIPMI 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
FreeIPMI是FreeIPMI开源的一个提供IPMI接口管理与监控功能的服务器远程管理工具集。 FreeIPMI 1.6.18之前版本存在安全漏洞，该漏洞源于ipmi-oem的dell get-active-directory-config和fujitsu get-sel-entry-long-text子命令对响应消息存在缓冲区溢出，可能导致利用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-50031
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-50031
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-50031 (1)
Mailing List Discussions for CVE-2026-50031 (1)
Other References for CVE-2026-50031 (1)
IV. Related Vulnerabilities
Same product: FreeIPMI
Same vendor: FreeIPMI
Same weakness: CWE-121
- CVE-2026-14721
UTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-ba - CVE-2026-14606
RT-Thread SWM341 CAN SWM341.h CAN_Receive stack-based overfl - CVE-2026-14605
RT-Thread ls1c CAN ls1c_can.h recvmsg stack-based overflow - CVE-2026-6687
FatFs Stack Buffer Overflow via Uncapped exFAT Label Length - CVE-2026-54502
Oj: Stack Buffer Overflow in Oj.dump via Large Indent
V. Comments for CVE-2026-50031
No comments yet