Detections
Analytics
CVE-2026-18451
low
Description
The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session.
References
https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1