CVE-2026-18450

Name of the Vulnerable Software and Affected Versions Supermicro BMC (affected versions not specified)

Description The Baseboard Management Controller (BMC) fails to correctly enforce encryption and integrity requirements for IPMI commands. This allows an attacker to send crafted packets to execute arbitrary commands on active RMCP+ (Remote Management Control Protocol Plus) sessions without requiring authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.