KVM-over-IP Console Vulnerability in Supermicro Products

CVE-2026-18451

What is CVE-2026-18451?

A vulnerability exists in Supermicro's KVM-over-IP console where weaknesses in the session token generation may allow an attacker to predict or guess valid session tokens. As a result, unauthorized users may gain control over KVM sessions, potentially leading to the interception of sensitive data or unauthorized management of connected systems. This flaw highlights the importance of secure token practices to prevent session hijacking.

References