AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

SupermicroCVE-2026-18450

Supermicro X12SPI: code execution

Supermicro

CVE-2026-18450 · Published Oct 27, 2026

Critical9.8
No fix yet
Supermicro advisory

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

Affected versions

PackageAffectedFixed in
X12SPI
Product
<= 01.07.20No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-306

More Supermicro advisories

All Supermicro
Medium 6.6Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65213no fix yetHigh 7.2Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65211no fix yetMedium 4.9Oct 27Supermicro MBD-X12SPI: exposed filesCVE-2026-65210no fix yetHigh 7.4Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65219no fix yetHigh 8.8Oct 27Supermicro MBD-X12SPI: improper privilege managementCVE-2026-65220no fix yetHigh 7.2Oct 27Supermicro MBD-X12STW-F: command injectionCVE-2026-16521no fix yet