CVE-2026-18450
CriticalCVSS 9.8Summary
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Risk Assessment
Potential hijacking of an IPMI session and execution of arbitrary commands on managed hardware, possibly leading to full server compromise.
Recommendation
Update BMC firmware to a patched version and restrict IPMI access to trusted management networks.
Other vulnerabilities in BMC IPMI
See all- CVE-2026-65220High
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.
- CVE-2026-65210Medium
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.
- CVE-2026-18449High
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Original NVD description (English source)
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS