Search
Search Results (6 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-18451 | 1 Smci | 1 Mbd-x12spi | 2026-10-28 | 3.1 Low |
| The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session. | ||||
| CVE-2026-65219 | 1 Smci | 1 Mbd-x12spi | 2026-10-28 | 7.4 High |
| A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands. | ||||
| CVE-2026-65220 | 1 Smci | 1 Mbd-x12spi | 2026-10-28 | 8.8 High |
| A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges. | ||||
| CVE-2026-65210 | 1 Smci | 1 Mbd-x12spi | 2026-10-28 | 4.9 Medium |
| This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role. | ||||
| CVE-2026-65211 | 1 Smci | 1 Mbd-x12spi | 2026-10-28 | 7.2 High |
| This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system. | ||||
| CVE-2026-65213 | 1 Smci | 1 Mbd-x12spi | 2026-10-28 | 6.6 Medium |
| This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC | ||||
Page 1 of 1.