CVEvulnerability
CVE-2026-65219
7.4 HIGH
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-10-27
- Last modified
- 2026-10-27
- Assigner
- def9a96e-e099-41a9-bfac-30fd4f82c411
- CVSS 3.1 (def9a96e-e099-41a9-bfac-30fd4f82c411)
- 7.4 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-696
Description
A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.
Related
Weakness · CWE (1)
- CWE-696 Incorrect Behavior Order weakness
References
- https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1 www.supermicro.com