Live › vulnerability › CVE-2026-65220
Go to dashboardA logic flaw in the BMC IPMI implementation lets an attacker send specially crafted RAKP+ messages during authentication. The sources say this can escalate an account to administrator privileges on the baseboard management controller.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 08:31 UTC. All times on this page are UTC.
Teams that run servers or appliances with a BMC exposing IPMI over the network are affected. The sources do not say which vendors or firmware versions are vulnerable. Systems with no BMC or with IPMI disabled can skip this.
No product ranges from the sources yet.
ipmitool lan print from the host or an inventory of management network addresses.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-65220")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.