CVE-2026-18449 — Vulnerability intelligence

—

Published: 2026-10-27T08:16:53.583

CVSS

7.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

Sources

• CVE-2026-18449
• Original advisory