Lenovo has disclosed a high-severity security flaw in ThinkSystem V4 server management firmware that restores a default OpenBMC root password after a factory reset. Tracked as CVE-2026-81936, the issue could let attackers access enabled administrative interfaces and reach the controller’s underlying operating system, which is normally restricted. The CVE record, published on November 11, 2026, […]
This article has been indexed from Cyber Security News
Read the original article:
Lenovo Warns of High-Severity Server Flaw That Restores Default Root Credentials After Reset