A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.
https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1