Skip to content
OpenAdvisories
High · 7.5 CVE-2026-18449 EUVD-2026-110623GHSA-h8gp-mmvv-4j3c

Supermicro BMC contains a SMCRAKP Fixed Key vulnerability

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by Supermicro

Description

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

Affected products

VendorProductAffectedFixed
SMCI X12SPI 01.07.20 —

References