24,650 BMCs Disclose IPMI Password Hashes Before Login28. July 2026CybersecurityOver 24,650 publicly accessible server management interfaces expose IPMI authentication hashes, making them vulnerable to offline attacks on administrative credentials. Share on: