CVE-2026-65210
MediumCVSS 4.9Summary
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.
Risk Assessment
An authenticated IPMI Administrator could access confidential BMC files, violating least privilege and potentially exposing sensitive data.
Recommendation
Restrict access to the IPMI interface to trusted networks and accounts, and apply a BMC firmware update if available.
Other vulnerabilities in BMC IPMI
See all- CVE-2026-65220High
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.
- CVE-2026-18449High
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
- CVE-2026-18450Critical
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Original NVD description (English source)
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS