CVE-2026-65220
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.
Risk Assessment
An attacker could gain administrator privileges on the management controller, enabling full control over the hardware.
Recommendation
Update BMC firmware to a patched version and restrict network access to the IPMI service.
Other vulnerabilities in BMC IPMI
See all- CVE-2026-18450Critical
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
- CVE-2026-65210Medium
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.
- CVE-2026-18449High
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
Original NVD description (English source)
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS