CVE-2026-184509.8Critical
Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability
SMCI · X12SPI
Not in CISA KEV
0.4%probability of exploitation in the next 30 days
34th percentile
050100
Higher than 34% of scored CVEs
9.8CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 28 Oct.
- Supermicro fixes BMC flaws affecting 392 board modelsSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.