CVE-2026-65213: Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability
Published Oct 27, 2026
·Updated
This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC
Affected Software
1 affected component
Supermicro BMC IPMI
Event History
Oct 27, 2026
CVE Published
via MITRE·08:15 AM
Data Sourced
via MITRE·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
Systems running Supermicro BMC IPMI are exposed if an attacker can authenticate to IPMI with administrator privileges. The issue affects the BMC operating system context, where commands may run as root.
2
What access does an attacker need to exploit it?
An attacker needs authenticated IPMI administrator access. The vector is network-based, but exploitation is rated high complexity and does not require user interaction.
3
What is the potential impact after exploitation?
A successful attacker may execute arbitrary commands as the BMC operating system root user. The reported impact includes high confidentiality, integrity, and availability impact.