---
id: "CVE-2026-65211"
kind: "vulnerability"
aliases: ["CVE-2026-65211"]
title: "BMC firmware: IPMI administrator can write physical memory and run code"
severity: "high"
cvss: 7.2
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["bare-metal", "bmc", "infrastructure", "ipmi", "self-hosted"]
not_affected_if: ["ipmi-disabled", "no-bmc"]
published_at: "2026-10-27T09:16:33+00:00"
first_seen_at: "2026-10-27T09:30:50+00:00"
updated_at: "2026-10-27T09:32:51+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65211", "first_seen_at": "2026-10-27T09:30:50+00:00"}]
---

# BMC firmware: IPMI administrator can write physical memory and run code

An attacker holding IPMI Administrator credentials can read and write arbitrary physical memory on the baseboard management controller. That lets them execute code on the BMC operating system.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-27T09:30:50+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-65211

## From the sources

This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_