CVE-2026-18451

The Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to weaknesses in the HTML5 KVM-over-IP console token generation. Specifically, the use of a predictable time-seeded launch token may allow an attacker to guess the session token and gain control of the KVM session. The v...