Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2026-65219

Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Supermicro

Description

A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SMCI MBD-X12SPI

Default version status: affected

  • 1.07.20affected

References