Vulnerability in BMC RAKP+ Implementation for Supermicro Products

CVE-2026-65219

What is CVE-2026-65219?

A vulnerability in the BMC RAKP+ implementation exists that may grant an attacker the ability to initiate a request followed by a specially crafted RAKP message. This sequence can potentially lead to the establishment of an RMCP+ session that might be exploited to execute unauthorized commands on the affected system. Users are advised to review their firmware versions and apply the necessary updates to mitigate this risk.

References