Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
⚠️ CVE-2026-18450 (9.8) ⚠️ BMCs, the management chips inside servers, let an attacker run commands on an active session by sending crafted IPMI packets. No affected versions or fixed release are named yet. https://t.co/YiF0srBlqA
🚨 Supermicro server BMCs: a CVSS 9.8 flaw may let an attacker inject IPMI commands into an active session 🆔 CVE-2026-18450 · CVSS 3.1 9.8 (Supermicro, CNA): the BMC doesn't correctly enforce integrity and encryption requirements for IPMI commands, so crafted packets may execute arbitrary commands on an active RMCP+ session 📦 Part of an 8-CVE BMC firmware advisory (Oct 26, 2026) credited to runZero researchers, incl. CVE-2026-65219 · 7.4: an out-of-order RAKP message 3 may grant an IPMI session ✅ Fixed BMC firmware is listed per motherboard across X11-X14 and H11-H14 boards (e.g. X12SPi-TF: 01.07.27); a few SKUs are still TBD ⚠️ Supermicro says it is not aware of malicious use in the wild. Not in CISA KEV 🛡️ Update the BMC firmware and keep IPMI/BMC interfaces off the internet 🔗 https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1 #Supermicro #IPMI #CVE