CVE-2026-3821

Name of the Vulnerable Software and Affected Versions Supermicro SMASH services X14DBG-DAP (affected versions not specified) Supermicro SMASH services X14DBI (affected versions not specified)

Description Supermicro (SMC) SMASH services contain an arbitrary code execution issue. An authorized attacker can exploit the input capability of SMASH to compromise data integrity or launch a Denial-of-Service (DoS) attack against the Baseboard Management Controller (BMC), which is a specialized processor used for remote management of the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.