vulnerability · Tue 28 Jul 2026 · 12:10 UTC
Over 24,000 exposed server BMCs leak password hash via decades-old flaw
Filed UTCSource BLC ↗
More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface.
Get the next one first.
Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.