CVE-2026-18449High· 7.5▾ TwilightThe BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
X12SPI 01.07.20Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-18450Critical· 9.8Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability
CVE-2026-65211High· 7.2Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability
CVE-2026-65219High· 7.4Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability
CVE-2026-65213Medium· 6.6Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability
CVE-2026-65210Medium· 4.9Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability
CVE-2026-18451Low· 3.1Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token