CVE-2026-18449Supermicro BMC contains a SMCRAKP Fixed Key vulnerability

Beschreibung

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1