AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

SupermicroCVE-2026-65210

Supermicro MBD-X12SPI: exposed files

Supermicro

CVE-2026-65210 · Published Oct 27, 2026

Medium4.9
No fix yet
Supermicro advisory

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.

Affected versions

PackageAffectedFixed in
MBD-X12SPI
Product
<= 01.07.20No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-552

More Supermicro advisories

All Supermicro
Medium 6.6Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65213no fix yetHigh 7.2Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65211no fix yetHigh 7.4Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65219no fix yetHigh 8.8Oct 27Supermicro MBD-X12SPI: improper privilege managementCVE-2026-65220no fix yetHigh 7.2Oct 27Supermicro MBD-X12STW-F: command injectionCVE-2026-16521no fix yetHigh 7.5Oct 27Supermicro X12SPI: code executionCVE-2026-18449no fix yet