CVE-2026-65210

Published: Oct 27, 2026Modified: Oct 27, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: def9a96e-e099-41a9-bfac-30fd4f82c411 (Secondary)

Description

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.

Related CWEs

CWE-552

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (1)

https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1

Source: def9a96e-e099-41a9-bfac-30fd4f82c411

Timeline

No history available yet.