X12SPI vulnerabilities
CVEs whose affected-version data names the X12SPI package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-18450Critical· 9.8Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
▾ MidnightSMCI · X12SPIEPSS 0.40%via CVEORG
CVE-2026-18449High· 7.5Supermicro BMC contains a SMCRAKP Fixed Key vulnerability
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
▾ TwilightSMCI · X12SPIEPSS 0.34%via CVEORG