Quick answers
- Is CVE-2026-65220 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-65220 being exploited in the wild.
- How severe is CVE-2026-65220?
- High severity, with a CVSS score of 8.8, published 27 October 2026.
- Which products and versions are affected?
- Supermicro BMC Firmware Multiple motherboard models; see advisory for specific fixed versions per model.
- Is there a fix for CVE-2026-65220?
- Yes: fixed in Varies by motherboard model; see Supermicro advisory for model-specific firmware versions (e.g., MBD-X13DEG-QT 01.08.16, MBD-X13DEG-R 01.13.11, MBD-X13DDW-A 01.13.09, and many others). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-65220 attacked?
- It is attacked over the network, in device firmware.
- Am I affected by CVE-2026-65220?
- Check whether you run Supermicro BMC Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
How to fix
- Fixed in: Varies by motherboard model; see Supermicro advisory for model-specific firmware versions (e.g., MBD-X13DEG-QT 01.08.16, MBD-X13DEG-R 01.13.11, MBD-X13DDW-A 01.13.09, and many others)
Technical details
A logic flaw in the RAKP+ authentication protocol implementation of the Supermicro BMC allows privilege escalation from low-privileged IPMI user to administrator. An attacker with network access and initial IPMI credentials can send malformed RAKP+ messages to bypass authentication checks and escalate privileges. This requires low privilege credentials (PR:L) but no user interaction; exploitation grants full administrative access to the BMC.
Affected products
- Supermicro BMC firmware Multiple motherboard models; see advisory for specific fixed versions per model
Timeline
- 2026-10-27: disclosed