Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-16521

Supermicro BMC's syslog feature contains a command injection vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Supermicro

Description

An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SMCI MBD-X12STW-F

Default version status: affected

  • 01.02.08affected

References