CVE-2026-18450 — Vulnerability intelligence

SMCI — X12SPI

Published: 2026-10-27T07:46:02.598Z

CVSS

9.8

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

Sources

• CVE-2026-18450
• Original advisory
• CVE-2026-18450