CVE-2026-65213

MediumCVSS 6.6

Published: 27/10/2026(UTC)Updated: 27/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.54%

45th percentile - higher than 45% of all known CVEs

Summary

This vulnerability allows an authenticated IPMI administrator to execute commands as the operating system root user on the BMC. This enables full compromise of the BMC.

Risk Assessment

An actor with IPMI administrator privileges can obtain root access on the BMC, leading to complete control over the management controller. This may enable further attacks against the managed server and infrastructure.

Recommendation

Restrict access to IPMI to trusted management networks and enforce strong authentication. Update the BMC firmware to a version containing the fix as soon as it becomes available.

Other vulnerabilities in IPMI BMC

CVE-2026-65211High
This vulnerability allows an authenticated IPMI Administrator to read and write arbitrary BMC physical memory. This enables code execution on the BMC operating system.

Original NVD description (English source)

This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC

Vulnerability data from NVD (NIST) · CISA KEV · EPSS