CVE-2026-18449

Published: Oct 27, 2026Modified: Oct 27, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: def9a96e-e099-41a9-bfac-30fd4f82c411 (Secondary)

Description

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (1)

https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1

Source: def9a96e-e099-41a9-bfac-30fd4f82c411

Timeline

No history available yet.