SMCI has 9 CVEs on record. Disclosure cadence is accelerating: 9 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 9. The median CVSS is 7.2 (high), with 1 rated critical. None have a confirmed exploitation report. Most affected products: MBD-X12SPI (6), X12SPI (2), MBD-X12STW-F (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.2
- Publish → KEV
- —
- Last 90 days
- 9 prev 0
Products
- MBD-X12SPI 6
- X12SPI 2
- MBD-X12STW-F 1
Worst active — by depth score
CVE-2026-18450Critical· 9.8Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability54CVE-2026-65220High· 8.8Supermicro BMC IPMI feature contains a Privilege escalation vulnerability48CVE-2026-65219High· 7.4Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability41CVE-2026-18449High· 7.5Supermicro BMC contains a SMCRAKP Fixed Key vulnerability41CVE-2026-65211High· 7.2Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability40
SMCI vulnerabilities
CVEs affecting SMCI, newest first. Open any entry for full detail, references, and exploit status.
9 CVEsRSS
CVE-2026-65211High· 7.2Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability
This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.
CVE-2026-65219High· 7.4Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability
A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.
CVE-2026-65213Medium· 6.6Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability
This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC
CVE-2026-65210Medium· 4.9Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.
CVE-2026-18450Critical· 9.8Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
CVE-2026-18451Low· 3.1Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token
The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session.
CVE-2026-16521High· 7.2Supermicro BMC's syslog feature contains a command injection vulnerability
An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted.
CVE-2026-18449High· 7.5Supermicro BMC contains a SMCRAKP Fixed Key vulnerability
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
CVE-2026-65220High· 8.8Supermicro BMC IPMI feature contains a Privilege escalation vulnerability
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.