Integrity and Encryption Flaws in Supermicro BMC IPMI Commands

CVE-2026-18449

What is CVE-2026-18449?

The Supermicro Baseboard Management Controller (BMC) has a vulnerability that compromises the integrity and encryption requirements for Internet Protocol Management Interface (IPMI) commands. This flaw enables an attacker to manipulate IPMI packets, potentially executing arbitrary commands within an active session. The inadequacy in enforcing security measures may expose systems to unauthorized control and management, necessitating immediate attention and remediation.

References