{"id":"CVE-2026-18450","published":"2026-10-27T08:16:53.710","lastModified":"2026-10-27T08:16:53.710","description":"The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The BMC fails to enforce integrity and encryption on IPMI commands, allowing unauthenticated attackers to send forged packets that execute arbitrary commands on an active session.","exploitability":"High exploitability due to lack of authentication or integrity checks; no user interaction or prior access required.","blast_radius":"Full compromise of confidentiality, integrity, and availability of the affected system, potentially enabling remote code execution or system takeover.","remediation":"Apply firmware patch version 2.590 or later from the vendor, as this is the only version explicitly referenced in the description as fixing the issue.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ipmi","integrity-bypass","encryption-bypass","rce","ics"],"model":"garnet-coder","analyzedAt":"2026-10-27T08:48:56.162Z"}}