SM
Vendor
SMCI
11
CVEs
0
On KEV
9
New 30D
Products
MB8.8
MBD-X12SPI
SMCI
6 CVEs0 on KEV6 new
X19.8
X12SPI
SMCI
2 CVEs0 on KEV2 new
MB7.2
MBD-X12STW-F
SMCI
1 CVEs0 on KEV1 new
AS7.2
AS-2115HS-TNR
SMCI
1 CVEs0 on KEV0 new
X18.8
X14DBG-DAP,X14DBI
SMCI
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-65213 New | MB MBD-X12SPI SMCI | 6.6 | Oct 27 | Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability |
| CVE-2026-65211 New | MB MBD-X12SPI SMCI | 7.2 | Oct 27 | Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability |
| CVE-2026-65210 New | MB MBD-X12SPI SMCI | 4.9 | Oct 27 | Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability |
| CVE-2026-65220 New | MB MBD-X12SPI SMCI | 8.8 | Oct 27 | Supermicro BMC IPMI feature contains a Privilege escalation vulnerability |
| CVE-2026-65219 New | MB MBD-X12SPI SMCI | 7.4 | Oct 27 | Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability |
| CVE-2026-18451 New | MB MBD-X12SPI SMCI | 3.1 | Oct 27 | Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token |
| CVE-2026-18450 New | X1 X12SPI SMCI | 9.8 | Oct 27 | Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability |
| CVE-2026-18449 New | X1 X12SPI SMCI | 7.5 | Oct 27 | Supermicro BMC contains a SMCRAKP Fixed Key vulnerability |
| CVE-2026-16521 New | MB MBD-X12STW-F SMCI | 7.2 | Oct 27 | Supermicro BMC's syslog feature contains a command injection vulnerability |
| CVE-2026-3821 | X1 X14DBG-DAP,X14DBI SMCI | 8.8 | Jul 22 | Supermicro SMASH service contain an Arbitrary code execution issue |
| CVE-2026-3820 | AS AS-2115HS-TNR SMCI | 7.2 | Jun 4 | Supermicro BMC's SMTP service contains a command injection vulnerability |