AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

SupermicroCVE-2026-65220

Supermicro MBD-X12SPI: improper privilege management

Supermicro

CVE-2026-65220 · Published Oct 27, 2026

High8.8
No fix yet
Supermicro advisory

A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.

Affected versions

PackageAffectedFixed in
MBD-X12SPI
Product
<= 01.07.20No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-269

More Supermicro advisories

All Supermicro
Medium 6.6Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65213no fix yetHigh 7.2Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65211no fix yetMedium 4.9Oct 27Supermicro MBD-X12SPI: exposed filesCVE-2026-65210no fix yetHigh 7.4Oct 27Supermicro MBD-X12SPI: code executionCVE-2026-65219no fix yetHigh 7.2Oct 27Supermicro MBD-X12STW-F: command injectionCVE-2026-16521no fix yetHigh 7.5Oct 27Supermicro X12SPI: code executionCVE-2026-18449no fix yet