High · 7.2 CVE-2026-65211 EUVD-2026-110638GHSA-v4pm-whwg-hg9x

Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by Supermicro

Description

This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.

Affected products

Vendor	Product	Affected	Fixed
SMCI	MBD-X12SPI	01.07.20	—

References

https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1