CVE-2026-18450

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

CVE-2026-18449

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

CVE-2026-111461

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands o...

CVE-2026-65213

The Supermicro BMC IPMI feature contains a vulnerability that may allow an IPMI authenticated administrator to perform Arbitrary Command Execution with superuser privileges . This flaw, identified as CWE-78 (OS Command Injection), enables the execution of commands as the operating system root use...

CVE-2026-65213 Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability

This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC...

CVE-2026-65219 Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability

A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands...

CVE-2026-65219

A flaw in the BMC RAKP+ implementation on Supermicro hardware allows an attacker to send a request followed by a specially crafted RAKP message. This vulnerability enables the attacker to establish an RMCP+ session , which can then be used to execute commands . The root cause is identified as an ...

EUVD-2026-110635

A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands...

EUVD-2026-110633

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

EUVD-2026-110623

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

CVE-2026-18449

The Supermicro BMC contains a SMCRAKP Fixed Key vulnerability where the BMC fails to properly enforce integrity and encryption requirements for IPMI commands . An attacker can craft specific packets to execute arbitrary commands during an active session. The vulnerability is associated with CWE-7...

CVE-2026-18449 Supermicro BMC contains a SMCRAKP Fixed Key vulnerability

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

CVE-2026-16521

A command injection vulnerability exists in the Supermicro BMC syslog feature due to insufficient input filtering. An attacker can inject a command payload into a BMC function, which may execute when the associated service restarts. This flaw is associated with CWE-78 and has a CVSS 3.1 score of ...

EUVD-2026-110621

An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted...

CVE-2026-16521 Supermicro BMC's syslog feature contains a command injection vulnerability

An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted...

CVE-2026-111461

An OS command injection vulnerability exists in the OnCell G3150A-LTE Series . When SMS management functionality is enabled and configured, an attacker with the required privileges can exploit insufficient input validation to execute arbitrary commands on the affected device. The root cause is an...

CVE-2026-111461 SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands o...

EUVD-2026-110620

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands o...

Updated vim package fixes security vulnerabilities

Ex Command Injection via Unescaped Buffer Name in signjump in Vim v9.2.1090 Arbitrary Code Execution via Ruby Omni-Completion in Vim 9.2.1177 Command Execution via Rmd Syntax Highlighting in Vim 9.2.1178 Ex Command Execution via Cargo Quickfix Hooks in Vim 9.2.1201...

MGASA-2026-0555 Updated vim package fixes security vulnerabilities

Ex Command Injection via Unescaped Buffer Name in signjump in Vim v9.2.1090 Arbitrary Code Execution via Ruby Omni-Completion in Vim 9.2.1177 Command Execution via Rmd Syntax Highlighting in Vim 9.2.1178 Ex Command Execution via Cargo Quickfix Hooks in Vim 9.2.1201...