Search vulnerabilities

Results 2

Export CSV
CVE-2026-18450

Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-18449

Supermicro BMC contains a SMCRAKP Fixed Key vulnerability

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products