Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-65220

Supermicro BMC IPMI feature contains a Privilege escalation vulnerability

A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Smci
Products
Mbd-x12spi
CVE-2026-65219

Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability

A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Smci
Products
Mbd-x12spi
CVE-2026-65213

Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability

This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Smci
Products
Mbd-x12spi
CVE-2026-65211

Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability

This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Smci
Products
Mbd-x12spi
CVE-2026-65210

Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Smci
Products
Mbd-x12spi
CVE-2026-18451

Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token

The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Smci
Products
Mbd-x12spi