CVE-2026-18449

CVSS 7.5 (high) ยท published 2026-10-27

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

Weakness: CWE-798

Source: NVD CVE-2026-18449

References

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.