Skip to content
Section C · The archive · Dispatch
← The archive

vulnerability · Tue 28 Jul 2026 · 21:07 UTC

IPMI bug in BMCs found after 22 years, exposes 24,000-plus servers

Filed UTCSource RDT ↗

<table> <tr><td> <a href="https://www.reddit.com/r/cybersecurity/comments/1v9b8p5/ipmi_bug_in_bmcs_found_after_22_years_exposes/"> <img alt="IPMI bug in BMCs found after 22 years, exposes 24,000-plus servers" src="https://external-preview.redd.it/mdmrNwl6N1b79OsieCbigJpbGu8ijmbtAoo6KFOha7M.jpeg?width=640&amp;crop=smart&amp;auto=webp&amp;s=0aa722af528d45b79f36ee5aab5c4c4eddba8913" title="IPMI bug in BMCs found after 22 years, exposes 24,000-plus servers" /> </a> </td><td> &#32; submitted by &#32; <a href="https://www.reddit.com/user/NISMO1968"> /u/NISMO1968 </a> <br /> <span><a href="https://ww…

Get the next one first.

Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.