CVE-2026-65210: Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability
Published Oct 27, 2026
·Updated
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.
Affected Software
1 affected component
Supermicro BMC IPMI
Event History
Oct 27, 2026
CVE Published
via MITRE·08:07 AM
Data Sourced
via MITRE·08:07 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must be authenticated to the BMC IPMI interface with IPMI Administrator privileges. The issue is remotely reachable over the network and does not require user interaction.
2
What is the impact of successful exploitation?
A successful attacker can read arbitrary files from the BMC filesystem. This can disclose information beyond what should be available to an IPMI management administrator.