Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-18450

Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Supermicro

Description

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SMCI X12SPI

Default version status: unaffected

  • 01.07.20affected

References