CVSS 7.5 (high) ยท published 2026-10-27
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Weakness: CWE-798
Source: NVD CVE-2026-18449
Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.