by Kastro
Paper/Archive/CVE-2026-18450

CVE-2026-18450

SMCI X12SPI — Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 34.2.342 × 206.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

Affected

ProductAffectedFixed inSource
X12SPI01.07.20–CNA

Scores by source

Supermicro (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsupermicro.com/en/support/security_BMC_IPMI_Oct_2026_1