CVE-2026-65210
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.
Risk Assessment
An authenticated IPMI Administrator could access confidential BMC files, violating least privilege and potentially exposing sensitive data.
Recommendation
Restrict access to the IPMI interface to trusted networks and accounts, and apply a BMC firmware update if available.
Other vulnerabilities in BMC IPMI
See all- CVE-2026-18450Critical
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
- CVE-2026-65220High
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.
- CVE-2026-18449High
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Original NVD description (English source)
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS