Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-18449 1 Smci 1 X12spi 2026-11-04 7.5 High
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
CVE-2026-16521 1 Smci 1 Mbd-x12stw-f 2026-11-04 7.2 High
An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted.