CVE-2026-65211: Supermicro BMC firmware arbitrary memory access and code execution

CVE-2026-65211 · Severity: high · CVSS 7.2 · Published 2026-10-27

Supermicro's Baseboard Management Controller (BMC) firmware contains a critical vulnerability that allows an authenticated IPMI administrator to read and write arbitrary physical memory on the BMC, leading to code execution on the BMC operating system. An attacker with administrator credentials can gain full control of the BMC and potentially compromise the entire server infrastructure.

Technologies: Supermicro BMC Firmware. Vendors: Supermicro.

Quick answers

Is CVE-2026-65211 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-65211 being exploited in the wild.
How severe is CVE-2026-65211?
High severity, with a CVSS score of 7.2, published 27 October 2026.
Which products and versions are affected?
Supermicro BMC Firmware Various versions prior to October 2026 fixes as listed in advisory.
Is there a fix for CVE-2026-65211?
Yes: fixed in Supermicro BMC firmware versions: MBD-X13DEG-QT 01.08.16, MBD-X13SET-GC 01.08.16, MBD-X13SET-G 01.08.16, MBD-X13QEH+ 01.08.16, MBD-X13DEG-R 01.13.11, MBD-X13DDW-A 01.13.09, MBD-X13DAI-T 01.08.18, MBD-X13DEI-T 01.09.15, MBD-X13DEI 01.09.15, MBD-X13DGU 01.13.13, MBD-X13SEI-TF 01.13.11, MBD-X13SEI-F 01.13.11, MBD-X13SEW-TF 01.13.11, MBD-X13SEW-F 01.13.11, MBD-X13DEG-OA 01.13.13, MBD-X13SCH-LN4F 01.09.06, MBD-X13SCH-F 01.09.06, MBD-X13SCL-F 01.14.01, MBD-X13SCH-SYS 01.09.06, MBD-X13SCD-F 01.03.10, MBD-X13SCL-IF 01.14.01, MBD-H13SVW-NT 01.08.07, MBD-H13SVW-N 01.08.07, MBD-H13SSL-NT 01.09.08, MBD-H13SSL-N 01.09.08, MBD-H13DSG-O-CPU 01.13.07, MBD-H13DSH 01.09.08, MBD-H13SSW 01.09.07, MBD-H13SST-GC 01.09.07, MBD-H13SST-G 01.09.07, MBD-H13SAE-MF 01.09.04, MBD-H13SRD-F 01.05.11, MBD-H13SRE-F 01.05.11, MBD-H13SRA-F 01.05.08, MBD-H13SRA-TF 01.05.08, MBD-X13SEB-TF 01.08.04, MBD-H14SSL-N 01.07.05.05, MBD-H14SSL-NT 01.07.05.05, MBD-H14SST-GE 01.07.04.02, MBD-H14DSG-O-CPU 01.07.05.04, MBD-H14SST-G 01.07.04.02, MBD-H14DSH 01.07.05.04, MBD-H14SRV-HLN4F 01.07.01.06, MBD-H12DSU-iNR 01.04.13, MBD-H12DGO-6 01.06.05, MBD-H12SSW-iNR 01.08.08, MBD-H12SSL-NT 01.08.05, MBD-H12SSL-CT 01.08.05, MBD-H12SSL-C 01.08.05, MBD-H12SSL-i 01.08.05, MBD-H12DSG-Q-CPU6 01.06.05, MBD-H12SSW-NTR 03.10.51, MBD-H12DSG-O-CPU 01.08.08, MBD-X12DGO-6 01.09.07, MBD-X12DSC-6 01.15.01, MBD-X12DGU TBD, MBD-X12SPT-GC 1.07.05, MBD-X12SPT-G 1.07.05, MBD-H12DSi-NT6 01.06.37, MBD-H12DSi-N6 01.06.37, MBD-H12SSW-AN6 01.06.37, MBD-H12SSFR-AN6 01.06.37, MBD-H12DGQ-NT6 01.06.36, MBD-X12SPO-NTF 01.07.27, MBD-X12DPG-QT6 01.07.24, MBD-X12DPG-U6 01.08.19, MBD-X12DAI-N6 01.08.22, MBD-X12SPi-TF 01.07.27, MBD-X12SPW-TF 01.07.28, MBD-X12SPO-F 01.07.27, MBD-X12DPU-6 01.08.24, MBD-X12DPi-NT6 01.08.20, MBD-X12DPi-N6 01.08.20, MBD-X12SPM-LN6TF 01.07.27, MBD-X12SPZ-SPLN6F 01.15.06, MBD-X12SPL-F 01.07.28, MBD-X12DPL-NT6 01.07.27, MBD-X12DPL-i6 01.07.27, MBD-X12SPZ-LN4F 01.15.06, MBD-X12SPED-F 01.07.27, MBD-X12DPG-QBT6 01.05.40, MBD-X12DHM-6 01.08.20, MBD-X12DPG-AR 01.07.26, MBD-X12DPFR-AN6 01.08.21, MBD-X12DDW-A6 01.08.20, MBD-X12SPW-TF-001 01.07.28, MBD-X12SPM-LN4F 01.07.27, MBD-X12SPL-LN4F 01.07.28, MBD-X12DSC-A6 01.07.27, MBD-X12SPW-F 01.07.28, MBD-X12SPM-TF 01.07.27, MBD-X13SAZ-F 01.09.09, MBD-X13SAE-F 01.04.23, MBD-X13SWA-TF 01.09.09, MBD-X13SRA-TF 01.09.09, MBD-X12STH-SYS 01.06.18, MBD-X12STE-F 01.06.18, MBD-X12STL-F 01.06.18, MBD-X12STD-F 01.06.18, MBD-X12SDV-4C-SPT4F 01.11.07, MBD-X12SDV-14C-SPT8F 01.11.07, MBD-X12SDV-10C-SPT4F 01.11.07, MBD-X12SDV-8C-SPT4F 01.11.07, MBD-X12SDV-10C-SP6F 01.11.07, MBD-X12SDV-8CE-SP4F 01.11.07, MBD-X12SDV-8C-SP6F 01.11.07, MBD-X12SDV-4C-SP6F 01.11.07, MBD-X12SDV-20C-SPT8F 01.11.07, MBD-X12SDV-16C-SPT8F 01.11.07, MBD-X12SDV-8C-SPT8F 01.11.07, MBD-X12SDV-4C-SPT8F 01.11.07, MBD-X12SDV-10CR-SP6F 01.11.07, MBD-X12STL-IF 01.06.18, MBD-X12STH-LN4F 01.06.18, MBD-X12STH-F 01.06.18, MBD-M12SWA-TF 01.06.34, MBD-X12SCZ-TLN4F 01.08.10, MBD-X12SCZ-QF 01.08.10, MBD-X12SCZ-F 01.08.10, MBD-X12SCA-F 01.16.01, MBD-A3SSV-24C-SPLN10F 01.08.09, MBD-A3SPI-4C-LN6PF-01 01.05.34, MBD-A3SSV-8C-". Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-65211 attacked?
It is attacked over the network, in device firmware.
Am I affected by CVE-2026-65211?
Check whether you run Supermicro BMC Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • Fixed in: Supermicro BMC firmware versions: MBD-X13DEG-QT 01.08.16, MBD-X13SET-GC 01.08.16, MBD-X13SET-G 01.08.16, MBD-X13QEH+ 01.08.16, MBD-X13DEG-R 01.13.11, MBD-X13DDW-A 01.13.09, MBD-X13DAI-T 01.08.18, MBD-X13DEI-T 01.09.15, MBD-X13DEI 01.09.15, MBD-X13DGU 01.13.13, MBD-X13SEI-TF 01.13.11, MBD-X13SEI-F 01.13.11, MBD-X13SEW-TF 01.13.11, MBD-X13SEW-F 01.13.11, MBD-X13DEG-OA 01.13.13, MBD-X13SCH-LN4F 01.09.06, MBD-X13SCH-F 01.09.06, MBD-X13SCL-F 01.14.01, MBD-X13SCH-SYS 01.09.06, MBD-X13SCD-F 01.03.10, MBD-X13SCL-IF 01.14.01, MBD-H13SVW-NT 01.08.07, MBD-H13SVW-N 01.08.07, MBD-H13SSL-NT 01.09.08, MBD-H13SSL-N 01.09.08, MBD-H13DSG-O-CPU 01.13.07, MBD-H13DSH 01.09.08, MBD-H13SSW 01.09.07, MBD-H13SST-GC 01.09.07, MBD-H13SST-G 01.09.07, MBD-H13SAE-MF 01.09.04, MBD-H13SRD-F 01.05.11, MBD-H13SRE-F 01.05.11, MBD-H13SRA-F 01.05.08, MBD-H13SRA-TF 01.05.08, MBD-X13SEB-TF 01.08.04, MBD-H14SSL-N 01.07.05.05, MBD-H14SSL-NT 01.07.05.05, MBD-H14SST-GE 01.07.04.02, MBD-H14DSG-O-CPU 01.07.05.04, MBD-H14SST-G 01.07.04.02, MBD-H14DSH 01.07.05.04, MBD-H14SRV-HLN4F 01.07.01.06, MBD-H12DSU-iNR 01.04.13, MBD-H12DGO-6 01.06.05, MBD-H12SSW-iNR 01.08.08, MBD-H12SSL-NT 01.08.05, MBD-H12SSL-CT 01.08.05, MBD-H12SSL-C 01.08.05, MBD-H12SSL-i 01.08.05, MBD-H12DSG-Q-CPU6 01.06.05, MBD-H12SSW-NTR 03.10.51, MBD-H12DSG-O-CPU 01.08.08, MBD-X12DGO-6 01.09.07, MBD-X12DSC-6 01.15.01, MBD-X12DGU TBD, MBD-X12SPT-GC 1.07.05, MBD-X12SPT-G 1.07.05, MBD-H12DSi-NT6 01.06.37, MBD-H12DSi-N6 01.06.37, MBD-H12SSW-AN6 01.06.37, MBD-H12SSFR-AN6 01.06.37, MBD-H12DGQ-NT6 01.06.36, MBD-X12SPO-NTF 01.07.27, MBD-X12DPG-QT6 01.07.24, MBD-X12DPG-U6 01.08.19, MBD-X12DAI-N6 01.08.22, MBD-X12SPi-TF 01.07.27, MBD-X12SPW-TF 01.07.28, MBD-X12SPO-F 01.07.27, MBD-X12DPU-6 01.08.24, MBD-X12DPi-NT6 01.08.20, MBD-X12DPi-N6 01.08.20, MBD-X12SPM-LN6TF 01.07.27, MBD-X12SPZ-SPLN6F 01.15.06, MBD-X12SPL-F 01.07.28, MBD-X12DPL-NT6 01.07.27, MBD-X12DPL-i6 01.07.27, MBD-X12SPZ-LN4F 01.15.06, MBD-X12SPED-F 01.07.27, MBD-X12DPG-QBT6 01.05.40, MBD-X12DHM-6 01.08.20, MBD-X12DPG-AR 01.07.26, MBD-X12DPFR-AN6 01.08.21, MBD-X12DDW-A6 01.08.20, MBD-X12SPW-TF-001 01.07.28, MBD-X12SPM-LN4F 01.07.27, MBD-X12SPL-LN4F 01.07.28, MBD-X12DSC-A6 01.07.27, MBD-X12SPW-F 01.07.28, MBD-X12SPM-TF 01.07.27, MBD-X13SAZ-F 01.09.09, MBD-X13SAE-F 01.04.23, MBD-X13SWA-TF 01.09.09, MBD-X13SRA-TF 01.09.09, MBD-X12STH-SYS 01.06.18, MBD-X12STE-F 01.06.18, MBD-X12STL-F 01.06.18, MBD-X12STD-F 01.06.18, MBD-X12SDV-4C-SPT4F 01.11.07, MBD-X12SDV-14C-SPT8F 01.11.07, MBD-X12SDV-10C-SPT4F 01.11.07, MBD-X12SDV-8C-SPT4F 01.11.07, MBD-X12SDV-10C-SP6F 01.11.07, MBD-X12SDV-8CE-SP4F 01.11.07, MBD-X12SDV-8C-SP6F 01.11.07, MBD-X12SDV-4C-SP6F 01.11.07, MBD-X12SDV-20C-SPT8F 01.11.07, MBD-X12SDV-16C-SPT8F 01.11.07, MBD-X12SDV-8C-SPT8F 01.11.07, MBD-X12SDV-4C-SPT8F 01.11.07, MBD-X12SDV-10CR-SP6F 01.11.07, MBD-X12STL-IF 01.06.18, MBD-X12STH-LN4F 01.06.18, MBD-X12STH-F 01.06.18, MBD-M12SWA-TF 01.06.34, MBD-X12SCZ-TLN4F 01.08.10, MBD-X12SCZ-QF 01.08.10, MBD-X12SCZ-F 01.08.10, MBD-X12SCA-F 01.16.01, MBD-A3SSV-24C-SPLN10F 01.08.09, MBD-A3SPI-4C-LN6PF-01 01.05.34, MBD-A3SSV-8C-"

Technical details

CVE-2026-65211 is a privilege escalation and arbitrary memory access vulnerability in Supermicro BMC firmware affecting multiple motherboard models. An authenticated IPMI Administrator can leverage insufficient memory access controls to read and write arbitrary BMC physical memory, enabling arbitrary code execution on the BMC operating system. This requires valid IPMI administrator credentials and network access to the BMC.

Affected products

  • Supermicro BMC Firmware Various versions prior to October 2026 fixes as listed in advisory

Timeline

  • 2026-10-26: disclosed
  • 2026-10-27: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.