Skip to content
OpenAdvisories
Medium · 4.9 CVE-2026-65210 EUVD-2026-110637GHSA-xx37-69mm-2gc7

Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by Supermicro

Description

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.

Affected products

VendorProductAffectedFixed
SMCI MBD-X12SPI 01.07.20 —

References