AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SupermicroCVE-2026-3821

Supermicro X14DBG-DAP,X14DBI: code execution

Supermicro

CVE-2026-3821 · Published Jul 22, 2026 · updated Jul 23, 2026

High8.8
No fix yet
Supermicro advisory

Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI.

An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.

Affected versions

PackageAffectedFixed in
X14DBG-DAP,X14DBI
Product
<= 01.00.16.00No fix yet
<= 1.03.02.06No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More Supermicro advisories

All Supermicro
High 8.8Oct 27Supermicro MBD-X12SPI: improper privilege managementCVE-2026-65220no fix yetHigh 7.4Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65219no fix yetLow 3.1Oct 27Supermicro MBD-X12SPI: attacker could guess the session tokenCVE-2026-18451no fix yetCritical 9.8Oct 27Supermicro X12SPI: code executionCVE-2026-18450no fix yetHigh 7.5Oct 27Supermicro X12SPI: code executionCVE-2026-18449no fix yetHigh 7.2Oct 27Supermicro MBD-X12STW-F: command injectionCVE-2026-16521no fix yet