CVE-2026-65220: Supermicro BMC IPMI feature contains a Privilege escalation vulnerability
Published Oct 27, 2026
·Updated
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.
Affected Software
1 affected component
Supermicro BMC IPMI
Event History
Oct 27, 2026
CVE Published
via MITRE·08:02 AM
Data Sourced
via MITRE·08:02 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need before exploiting this issue?
The attacker needs an existing account with low privileges. The attack can be performed remotely over the network and does not require user interaction.
2
What is the impact if exploitation succeeds?
A successful attack can escalate the existing account to administrator privileges on the BMC IPMI implementation. The vulnerability is rated high severity with high confidentiality, integrity, and availability impact.