AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

SupermicroCVE-2026-65219

Supermicro MBD-X12SPI: code execution

Supermicro

CVE-2026-65219 · Published Oct 27, 2026

High7.4
No fix yet
Supermicro advisory

A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.

Affected versions

PackageAffectedFixed in
MBD-X12SPI
Product
<= 1.07.20No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-696

More Supermicro advisories

All Supermicro
Medium 6.6Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65213no fix yetHigh 7.2Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65211no fix yetMedium 4.9Oct 27Supermicro MBD-X12SPI: exposed filesCVE-2026-65210no fix yetHigh 8.8Oct 27Supermicro MBD-X12SPI: improper privilege managementCVE-2026-65220no fix yetHigh 7.2Oct 27Supermicro MBD-X12STW-F: command injectionCVE-2026-16521no fix yetHigh 7.5Oct 27Supermicro X12SPI: code executionCVE-2026-18449no fix yet