Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-3821

Supermicro SMASH service contain an Arbitrary code execution issue

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Supermicro

Description

Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SMCI X14DBG-DAP,X14DBI

Default version status: unaffected

  • 01.00.16.00affected
  • 1.03.02.06affected

References