CVE-2026-18449
HighCVSS 7.5Summary
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Risk Assessment
Arbitrary command execution within an active IPMI session is possible, potentially compromising managed hardware.
Recommendation
Update BMC firmware to a patched version and restrict IPMI access to trusted management networks.
Other vulnerabilities in BMC IPMI
See all- CVE-2026-65220High
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.
- CVE-2026-65210Medium
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.
- CVE-2026-18450Critical
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Original NVD description (English source)
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS