CVE-2026-65198

Name of the Vulnerable Software and Affected Versions openUBMC (affected versions not specified)

Description openUBMC ships with a default SNMPv3 USM key that utilizes a single value for both authentication and privacy. Because these keys are constants within the open-source build and not unique per unit, an attacker can recover them to authenticate SNMPv3 requests and decrypt traffic. The issue involves the AuthenticationKey and EncryptionKey variables defined in the manifest/build/customization/default password.lua and account/manufacture/default password.lua files. These keys are not rotated during Administrator password resets, allowing them to persist after account provisioning. Since SNMP access is mapped to full device administration privileges, this could allow unauthorized system resets and firmware upgrades.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.