[ Vendor · 9 CVEs ]
SMCI
CVEs affecting SMCI published in the last 30 days, plus any SMCI CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-65213 | 27 Oct 2026 | CVSS 6.6 | SMCI MBD-X12SPIThis issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC | |
| CVE-2026-65211 | 27 Oct 2026 | CVSS 7.2 | SMCI MBD-X12SPIThis issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC… | |
| CVE-2026-65210 | 27 Oct 2026 | CVSS 4.9 | SMCI MBD-X12SPIThis issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the… | |
| CVE-2026-65219 | 27 Oct 2026 | CVSS 7.4 | SMCI MBD-X12SPIA flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+… | |
| CVE-2026-65220 | 27 Oct 2026 | CVSS 8.8 | SMCI MBD-X12SPIA logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator… | |
| CVE-2026-16521 | 27 Oct 2026 | CVSS 7.2 | SMCI MBD-X12STW-FAn OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function… | |
| CVE-2026-18449 | 27 Oct 2026 | CVSS 7.5 | SMCI X12SPIThe BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute… | |
| CVE-2026-18450 | 27 Oct 2026 | CVSS 9.8 | SMCI X12SPIThe BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute… | |
| CVE-2026-18451 | 27 Oct 2026 | CVSS 3.1 | SMCI MBD-X12SPIThe HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess… |