CVE-2026-18450

critical · 9.8

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

9.8

CVSS

—

EPSS (exploit prob.)

—

EPSS percentile

2026-10-27

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-306

References

https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-18450