CVE-2026-65219 — Vulnerability intelligence
—
Published:
- CVSS
- 7.4
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.