Lights Out: The server in your server, exposed and disclosed

RunZero disclosed two related OpenBMC IPMI vulnerabilities (CVE-2026-16141 authentication bypass and CVE-2026-16140 privilege escalation) that, when chained and under certain conditions, can give network access to IPMI administrative control of the BMC. The report explains affected components and downstream products, detection guidance (asset discovery, IPMI queries, and runZero/oobscan tools), and plans for additional out-of-band device disclosures over the coming weeks.