# CVE-2026-65213: Supermicro BMC firmware arbitrary command execution with root privileges

Source: https://junglewise.ai/threats/cve-2026-65213-this-issue-may-allow-an-ipmi-authenticated-administrator-to  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-27. Updated: 2026-10-27  
License: CC BY 4.0 with a link back

CVE-2026-65213 · Severity: medium · CVSS 6.6 · Published 2026-10-27

Supermicro's Baseboard Management Controller (BMC) firmware, which manages physical servers remotely, contains a flaw that allows authenticated administrators to execute arbitrary commands as the operating system's root user. An attacker with valid IPMI administrator credentials can exploit this to fully compromise the BMC, potentially gaining control of the underlying server hardware and any workloads running on it.

Vendors: [Supermicro](https://junglewise.ai/threats/vendors/supermicro).

## Quick answers

**Is CVE-2026-65213 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-65213 being exploited in the wild.

**How severe is CVE-2026-65213?** Medium severity, with a CVSS score of 6.6, published 27 October 2026.

**Which products and versions are affected?** Supermicro BMC firmware (A3 series) Multiple A3 motherboard models with versions prior to those listed in advisory; Supermicro BMC firmware (H12 series) Multiple H12 motherboard models with versions prior to those listed in advisory; Supermicro BMC firmware (H13 series) Multiple H13 motherboard models with versions prior to those listed in advisory; Supermicro BMC firmware (H14 series) Multiple H14 motherboard models with versions prior to those listed in advisory; and 2 more.

**Is there a fix for CVE-2026-65213?** Yes: fixed in Model-specific firmware versions as listed in Supermicro advisory (e.g., MBD-X13DEG-QT 01.08.16, MBD-X13SET-GC 01.08.16, MBD-X13DEG-R 01.13.11, and others per the complete vendor list). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-65213 attacked?** It is attacked over the network, in device firmware.

**Am I affected by CVE-2026-65213?** Check whether you run Supermicro BMC firmware (A3 series), Supermicro BMC firmware (H12 series), Supermicro BMC firmware (H13 series) or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Model-specific firmware versions as listed in Supermicro advisory (e.g., MBD-X13DEG-QT 01.08.16, MBD-X13SET-GC 01.08.16, MBD-X13DEG-R 01.13.11, and others per the complete vendor list)

## Technical details

CVE-2026-65213 allows an IPMI-authenticated administrator to execute arbitrary commands as root on the BMC operating system due to improper privilege handling in the IPMI implementation. The vulnerability requires valid IPMI administrator credentials and network access to the BMC management interface. A successful exploit grants complete control of the BMC, including the ability to modify firmware, access sensitive data, or disrupt server operations.

## Affected products

- Supermicro BMC firmware (X13 series) Multiple X13 motherboard models with versions prior to those listed in advisory
- Supermicro BMC firmware (H13 series) Multiple H13 motherboard models with versions prior to those listed in advisory
- Supermicro BMC firmware (X12 series) Multiple X12 motherboard models with versions prior to those listed in advisory
- Supermicro BMC firmware (H12 series) Multiple H12 motherboard models with versions prior to those listed in advisory
- Supermicro BMC firmware (H14 series) Multiple H14 motherboard models with versions prior to those listed in advisory
- Supermicro BMC firmware (A3 series) Multiple A3 motherboard models with versions prior to those listed in advisory

## Timeline

- 2026-10-27: disclosed

## References

- [https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1](https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1)