CVE-2026-18449

CVE-2026-18449CVE-2026-18449

Description

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

Scoring

CVSS 7.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Last modified2026-10-27
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.