CVEvulnerability

CVE-2026-18450

9.8 CRITICAL Published 2026-10-27 Modified 2026-10-27 Official page ↗
Status
Awaiting Analysis
Published
2026-10-27
Last modified
2026-10-27
Assigner
def9a96e-e099-41a9-bfac-30fd4f82c411
CVSS 3.1 (def9a96e-e099-41a9-bfac-30fd4f82c411)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-306

Description

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References