CVE-2026-65211

24th percentile - higher than 24% of all known CVEs

This vulnerability allows an authenticated IPMI Administrator to read and write arbitrary BMC physical memory. This enables code execution on the BMC operating system.

An actor with IPMI administrator privileges can gain full control over the BMC, potentially leading to compromise of hardware management and further escalation within the environment. This poses a serious threat to the integrity and confidentiality of server infrastructure.

Restrict access to the IPMI interface to trusted management networks and enforce strong, unique credentials. Update the BMC firmware to a version containing the fix as soon as it becomes available.