<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: SMCI MBD-X12SPI</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/smci-mbd-x12spi.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-65211: Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-65211/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-65211/</guid><pubDate>Tue, 27 Oct 2026 08:12:15 +0000</pubDate><description>This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.</description></item><item><title>CVE-2026-65220: Supermicro BMC IPMI feature contains a Privilege escalation vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-65220/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-65220/</guid><pubDate>Tue, 27 Oct 2026 08:02:49 +0000</pubDate><description>A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.</description></item><item><title>CVE-2026-65219: Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-65219/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-65219/</guid><pubDate>Tue, 27 Oct 2026 07:57:12 +0000</pubDate><description>A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.</description></item></channel></rss>
