High severity · published Oct 27, 2026
CVE-2026-65211
Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability
New
7.2
CVSS
0.3%
EPSS
No
On KEV
Description
This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MB
MBD-X12SPI · SMCI
01.07.20 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-65211
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-65211
www.supermicro.com
https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1
More from MBD-X12SPI
8.8
CVE-2026-65220
Supermicro BMC IPMI feature contains a Privilege escalation vulnerability
7.4
CVE-2026-65219
Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability
6.6
CVE-2026-65213
Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability
4.9
CVE-2026-65210
Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability
3.1
CVE-2026-18451
Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token