{"id":"CVE-2026-16521","published":"2026-10-27T08:16:53.443","lastModified":"2026-10-27T08:16:53.443","description":"An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted.","cvssScore":7.2,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_2","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}