Critical severity · published Oct 27, 2026
CVE-2026-18450
Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability
New
9.8
CVSS
0.4%
EPSS
No
On KEV
Description
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
X1
X12SPI · SMCI
01.07.20 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-18450
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-18450
www.supermicro.com
https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1
More from X12SPI
7.5
CVE-2026-18449
Supermicro BMC contains a SMCRAKP Fixed Key vulnerability