Vulnerabilities in SMCI
23 resultsCVE-2026-16521HIGHSupermicro BMC's syslog feature contains a command injection vulnerabilityEPSS 0.9%CVE-2026-3821HIGHSupermicro SMASH service contain an Arbitrary code execution issueEPSS 0.6%CVE-2026-65213MEDIUMSupermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerabilityEPSS 0.5%CVE-2024-10238HIGHfld->used_bytes without sanity check causes stack overflowEPSS 0.5%CVE-2024-10239HIGHfld->used_bytes without sanity check causes stack overflowEPSS 0.5%CVE-2026-65219HIGHSupermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerabilityEPSS 0.5%CVE-2026-18450CRITICALSupermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerabilityEPSS 0.4%CVE-2026-3820HIGHSupermicro BMC's SMTP service contains a command injection vulnerabilityEPSS 0.4%CVE-2025-8727HIGHA stack buffer overflow vulnerability exists in the Supermicro BMC Web function(SSL).EPSS 0.4%CVE-2025-8076HIGHA stack buffer overflow vulnerability exists in the Supermicro BMC Web functionEPSS 0.4%CVE-2025-8404MEDIUMStack buffer overflow vulnerability exists in the Supermicro BMC Shared libraryEPSS 0.3%CVE-2026-18449HIGHSupermicro BMC contains a SMCRAKP Fixed Key vulnerabilityEPSS 0.3%CVE-2025-6198HIGHSupermicro BMC firmware update validation bypassEPSS 0.3%CVE-2025-7937HIGHSupermicro BMC firmware update validation bypassEPSS 0.3%CVE-2026-65211HIGHSupermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerabilityEPSS 0.3%CVE-2025-12006HIGHSupermicro BMC firmware update validation bypassEPSS 0.3%CVE-2025-7623MEDIUMSupermicro BMC SMASH services has a Stack-based buffer overflow vulnerabilityEPSS 0.3%CVE-2024-10237HIGHSMC BMC Firmware Image Authentication Design IssueEPSS 0.3%CVE-2026-65220HIGHSupermicro BMC IPMI feature contains a Privilege escalation vulnerabilityEPSS 0.3%CVE-2025-7704MEDIUMSupermicro BMC SMASH services has a Stack-based buffer overflow vulnerabilityEPSS 0.2%