CVE-2026-18451EUVD-2026-110634GHSA-3989-GJGC-5CM8
Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The affected software is the firmware for Supermicro baseboard management controllers (BMCs), specifically the iKVM remote console feature. An attacker who can predict the session token used by the HTML5 KVM-over-IP console could hijack an active remote console session and gain control of the server's display and keyboard.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- SMCI MBD-X12SPI
01.07.20