IPMI Command Execution Flaw in Supermicro BMC Products
CVE-2026-65213

6.6MEDIUM

Key Information:

Vendor

Smci

Status
Mbd-x12spi
Vendor
CVE Published:
27 October 2026

What is CVE-2026-65213?

A security issue has been identified in Supermicro's BMC products that may allow an authenticated IPMI administrator to execute system-level commands with root privileges. This vulnerability poses a significant risk, as it can lead to unauthorized access and control over the system, potentially compromising sensitive information and resources. Users are advised to apply patches as soon as they become available to mitigate this issue.

Affected Version(s)

MBD-X12SPI BMC 01.07.20

References

https://www.supermicro.com/en/support/security_BMC_IPMI_O...

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

runZero
.