SMCI

Products

ProductCVEsExploitedLatest
MBD-X12SPI6–Oct 27, 2026
MBD-X13SEDW-F3–Nov 18, 2025
MBD-X12DPG-OA63–Feb 4, 2025
X12SPI2–Oct 27, 2026
X13SEM-F2–Jan 16, 2026
X13SEDW-F1–Nov 18, 2025
AS-2115HS-TNR1–Jun 4, 2026
X14DBG-DAP,X14DBI1–Jul 22, 2026
MBD-X12STW1–Sep 19, 2025
MBD-X12STW-F1–Oct 27, 2026
SYS-111C-NR1–Nov 13, 2025
X12STW-F1–Jan 16, 2026

Exploited and recent CVEs

  • CVE-2026-65213 Medium 6.6 Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability 0.5%
  • CVE-2026-65211 High 7.2 Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability 0.3%
  • CVE-2026-65210 Medium 4.9 Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability 0.2%
  • CVE-2026-65220 High 8.8 Supermicro BMC IPMI feature contains a Privilege escalation vulnerability 0.3%
  • CVE-2026-65219 High 7.4 Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability 0.5%
  • CVE-2026-18451 Low 3.1 Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token 0.2%
  • CVE-2026-18450 Critical 9.8 Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability 0.4%
  • CVE-2026-18449 High 7.5 Supermicro BMC contains a SMCRAKP Fixed Key vulnerability 0.3%
  • CVE-2026-16521 High 7.2 Supermicro BMC's syslog feature contains a command injection vulnerability 0.9%
  • CVE-2026-3821 High 8.8 Supermicro SMASH service contain an Arbitrary code execution issue 0.6%
  • CVE-2026-3820 High 7.2 Supermicro BMC's SMTP service contains a command injection vulnerability 0.4%
  • CVE-2025-12007 High 8.4 Supermicro BMC firmware update validation bypass 0.1%
  • CVE-2025-12006 High 7.2 Supermicro BMC firmware update validation bypass 0.3%
  • CVE-2025-8727 High 7.2 A stack buffer overflow vulnerability exists in the Supermicro BMC Web function(SSL). 0.4%
  • CVE-2025-8404 Medium 5.5 Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library 0.3%
  • CVE-2025-8076 High 7.2 A stack buffer overflow vulnerability exists in the Supermicro BMC Web function 0.4%
  • CVE-2025-7623 Medium 5.4 Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability 0.3%
  • CVE-2025-7704 Medium 5.4 Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability 0.2%
  • CVE-2025-7937 High 7.2 Supermicro BMC firmware update validation bypass 0.3%
  • CVE-2025-6198 High 7.2 Supermicro BMC firmware update validation bypass 0.3%
  • CVE-2024-10239 High 7.2 fld->used_bytes without sanity check causes stack overflow 0.5%
  • CVE-2024-10238 High 7.2 fld->used_bytes without sanity check causes stack overflow 0.5%
  • CVE-2024-10237 High 7.2 SMC BMC Firmware Image Authentication Design Issue 0.3%