SMCI vulnerabilities

CVEs per yearBy the year they were published

1. 202510
2. 202613

Newest CVEs

• CVE-2026-65213

  Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability

  SMCI · MBD-X12SPI

  Medium6.6
• CVE-2026-65211

  Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability

  SMCI · MBD-X12SPI

  High7.2
• CVE-2026-65210

  Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability

  SMCI · MBD-X12SPI

  Medium4.9
• CVE-2026-65220

  Supermicro BMC IPMI feature contains a Privilege escalation vulnerability

  SMCI · MBD-X12SPI

  High8.8
• CVE-2026-65219

  Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability

  SMCI · MBD-X12SPI

  High7.4
• CVE-2026-18451

  Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token

  SMCI · MBD-X12SPI

  Low3.1
• CVE-2026-18450

  Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability

  SMCI · X12SPI

  Critical9.8
• CVE-2026-18449

  Supermicro BMC contains a SMCRAKP Fixed Key vulnerability

  SMCI · X12SPI

  High7.5
• CVE-2026-16521

  Supermicro BMC's syslog feature contains a command injection vulnerability

  SMCI · MBD-X12STW-F

  High7.2
• CVE-2026-3821

  Supermicro SMASH service contain an Arbitrary code execution issue

  SMCI · X14DBG-DAP,X14DBI

  High8.8