Skip to content
OpenAdvisories
High · 7.2 CVE-2025-12006 EUVD-2026-2961GHSA-j6wx-x2h7-qphp

Supermicro BMC firmware update validation bypass

Published Jan 16, 2026 · Updated Feb 26, 2026 · Assigned by Supermicro

Description

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW-F . An attacker can update the system firmware with a specially crafted image.

Affected products

VendorProductAffectedFixed
SMCI X12STW-F 01.07.09 fixed in 01.08.08

References