CVEvulnerability

CVE-2026-18449

7.5 HIGH Published 2026-10-27 Modified 2026-10-27 Official page ↗
Status
Awaiting Analysis
Published
2026-10-27
Last modified
2026-10-27
Assigner
def9a96e-e099-41a9-bfac-30fd4f82c411
CVSS 3.1 (def9a96e-e099-41a9-bfac-30fd4f82c411)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-798

Description

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References