CVSS 9.8 (critical) · published 2026-10-27
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Weakness: CWE-306
Source: NVD CVE-2026-18450
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.