Loading story…
FreeIPMI versions before 1.6.19 contain a critical stack-based buffer overflow, tracked as CVE-2026-85504, in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text. An attacker can reportedly trigger the flaw by supplying malformed Fujitsu System Event Log (SEL) long-text responses; the issue carries a CVSS v3.1 score of 9.8 and requires neither privileges nor user interaction.
FreeIPMI 1.6.19 remediates the Fujitsu SEL issue alongside other potential stack overflows found through code analysis, including flaws in Dell-focused ipmi-oem system-information functionality and libfreeipmi. The release also includes numerous reliability, parsing, portability, monitoring, and memory-management corrections. Organizations using FreeIPMI should upgrade to version 1.6.19 or later.
See affected versions and whether adversaries are exploiting it.
4 events from the most recent confirmed update back to the earliest known activity.
CVE-2026-85504 was published for a critical remotely exploitable stack-based buffer overflow in FreeIPMI versions before 1.6.19. Malformed Fujitsu SEL long-text responses can trigger the flaw in `_ipmi_sel_oem_fujitsu_get_sel_entry_long_text`; upgrading to 1.6.19 or later remediates it.
Chad Dougherty forwarded Al Chu's FreeIPMI 1.6.19 release announcement to the oss-security mailing list, advising users to upgrade for the buffer-overflow fixes.
FreeIPMI 1.6.19 was released, fixing potential stack buffer overflows found through code analysis, including Fujitsu long SEL-entry handling in ipmi-oem and libfreeipmi. The release also addressed potential overflows in Dell get-system-info subcommands.
The FreeIPMI 1.6.19 fixes were assigned six CVEs: CVE-2026-85504 through CVE-2026-85509. In addition to the Fujitsu SEL overflow tracked as CVE-2026-85504, the release addresses potential Dell OEM command and libfreeipmi Fujitsu SEL-entry stack overflows.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
5 references tracked. Mallory keeps watching after this page renders.
seclists.org
Open sourcecvefeed.io
Open sourcetenable.com
Open sourcesavannah.gnu.org
Open sourceopenwall.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A public disclosure on the `oss-sec` mailing list reported a **stack buffer overflow** in **BIRD/BIRD2** tied to **BGP `AS_PATH` mask matching**, with a CVE still pending and no confirmed fixed release. Researcher comments in the thread said **BIRD 2.16.2** was reproduced as vulnerable, while other **BIRD 2.x** versions may also be affected if they use the same implementation. The discussion also highlighted conflicting views on remediation status: the reporter said maintainers indicated they did not currently plan to fix the issue, while other participants challenged whether the claim that no fix existed had been sufficiently validated against newer versions or unpublished changes. Separately, **GNU FreeIPMI 1.6.18** was released with security fixes for **exploitable buffer overflows** in OEM-specific `ipmi-oem` functionality. The project said the affected commands were `ipmi-oem dell get-active-directory-config` and `ipmi-oem fujitsu get-sel-entry-long-text`; the release also added an `altbridging` workaround in `ipmi-sensors`. An `oss-sec` post noted that no new CVE appeared to have been assigned for these FreeIPMI flaws at publication time and clarified that **`CVE-2026-33554`** referred to different subcommands fixed earlier in **FreeIPMI 1.6.17**.
Jun 29, 2026
**CVE-2023-42753** is a high-severity Linux kernel Netfilter flaw in the `hash:net,port,net` ipset implementation. A missing `IP_SET_HASH_WITH_NET0` macro causes an incorrect `CIDR_POS(c)` array-offset calculation, permitting integer underflow and an out-of-bounds increment or decrement of the `h->nets` array. A local low-privileged attacker could crash an affected system and potentially elevate privileges; Red Hat rated the issue CVSS 7.0, while NVD assigned 7.8. Upstream corrected the defect in commit `050d91c03b28ca479df13dfb02bcd2c60dd6a878`, with Fedora including the fix in kernel 6.5.3. Red Hat issued updates across affected RHEL 7, 8, and 9 package streams, including RHEL 8.8 live-kernel patches delivered through RHSA-2023:7558; the `kpatch-patch` modules load automatically and apply the fix without a conventional reboot. No practical mitigation is available, so organizations should update affected kernel packages promptly; RHEL 7.6 was assessed as unaffected because it rejects `/0` netmasks.
Aug 26, 2026
Fuji Electric Monitouch V-SFT-6 human-machine interface (HMI) configuration software is affected by two critical vulnerabilities: a heap-based buffer overflow (CVE-2025-54496) and a stack-based buffer overflow (CVE-2025-54526). Both vulnerabilities can be triggered by processing specially crafted project files, potentially allowing attackers to execute arbitrary code on affected systems. The vulnerabilities impact at least version 6.2.7.0 of the software, and exploitation could result in device crashes or full compromise of the HMI environment. The vulnerabilities are rated with a CVSS v4 base score of 8.4, indicating high severity, and require user interaction to trigger, but do not require remote exploitation. CISA has issued an advisory (ICSA-25-308-01) detailing these vulnerabilities and urging users and administrators to review technical details and apply recommended mitigations. The advisories emphasize the risk to industrial control environments and recommend caution when handling project files from untrusted sources. No specific affected product list has been published, but the vulnerabilities are confirmed in the latest available version. Organizations using Fuji Electric Monitouch V-SFT-6 should prioritize patching and follow CISA's mitigation guidance to reduce the risk of exploitation.
Jun 29, 2026