AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

SupermicroCVE-2026-65211

Supermicro MBD-X12SPI: code execution

Supermicro

CVE-2026-65211 · Published Oct 27, 2026

High7.2
No fix yet
Supermicro advisory

This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.

Affected versions

PackageAffectedFixed in
MBD-X12SPI
Product
<= 01.07.20No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-287

More Supermicro advisories

All Supermicro
Medium 6.6Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65213no fix yetMedium 4.9Oct 27Supermicro MBD-X12SPI: exposed filesCVE-2026-65210no fix yetHigh 7.4Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65219no fix yetHigh 8.8Oct 27Supermicro MBD-X12SPI: improper privilege managementCVE-2026-65220no fix yetHigh 7.2Oct 27Supermicro MBD-X12STW-F: command injectionCVE-2026-16521no fix yetHigh 7.5Oct 27Supermicro X12SPI: code executionCVE-2026-18449no fix yet