Description
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SMCI | MBD-X12SPI | 01.07.20 | — |
High · 8.8
CVE-2026-65220
EUVD-2026-110636GHSA-6fhf-89qw-rcm8
Supermicro BMC IPMI feature contains a Privilege escalation vulnerability
Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by Supermicro