https://vulnogram.org/ Most recent CVEs assigned by Super Micro Computer, Inc. (supermicro). https://vulnogram.org/seaview/icons/supermicro.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-3821 https://vulnogram.org/CVE-2026-3821 Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC. High Wed, 22 Jul 2026 06:15:31 GMT https://vulnogram.org/CVE-2026-3820 https://vulnogram.org/CVE-2026-3820 There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system… High Thu, 04 Jun 2026 08:07:57 GMT https://vulnogram.org/CVE-2025-12007 https://vulnogram.org/CVE-2025-12007 There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a specially crafted image. High Fri, 16 Jan 2026 08:39:41 GMT https://vulnogram.org/CVE-2025-12006 https://vulnogram.org/CVE-2025-12006 There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW-F . An attacker can update the system firmware with a specially crafted image. High Fri, 16 Jan 2026 08:36:33 GMT https://vulnogram.org/CVE-2025-8727 https://vulnogram.org/CVE-2025-8727 There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web server, an attacker can use a specially crafted payload to trigger the Stack buffer overflow vulnerability. High Tue, 18 Nov 2025 07:52:09 GMT https://vulnogram.org/CVE-2025-8404 https://vulnogram.org/CVE-2025-8404 Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library. An authenticated attacker with access to the BMC exploit stack buffer via a crafted header and achieve arbitrary code execution of the BMC’s firmware operating system. Medium Tue, 18 Nov 2025 07:43:15 GMT https://vulnogram.org/CVE-2025-8076 https://vulnogram.org/CVE-2025-8076 There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web server, an attacker can use a specially crafted payload to trigger the Stack buffer overflow vulnerability. High Tue, 18 Nov 2025 07:16:57 GMT https://vulnogram.org/CVE-2025-7623 https://vulnogram.org/CVE-2025-7623 Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH command, overwrite the return address and registers, and achieve arbitrary code execution… Medium Tue, 18 Nov 2025 07:05:21 GMT https://vulnogram.org/CVE-2025-7704 https://vulnogram.org/CVE-2025-7704 Supermicro BMC Insyde SMASH shell program has a stacked-based overflow vulnerability Medium Thu, 13 Nov 2025 09:12:11 GMT https://vulnogram.org/CVE-2025-7937 https://vulnogram.org/CVE-2025-7937 There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW . An attacker can update the system firmware with a specially crafted image. High Fri, 19 Sep 2025 02:09:33 GMT https://vulnogram.org/CVE-2025-6198 https://vulnogram.org/CVE-2025-6198 There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a specially crafted image. High Fri, 19 Sep 2025 01:45:39 GMT https://vulnogram.org/CVE-2024-10239 https://vulnogram.org/CVE-2024-10239 A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6 . An attacker with administrator privileges can upload a specially crafted image, which can cause a stack overflow due to the unchecked fat->fsd.max_fld. High Tue, 04 Feb 2025 08:02:02 GMT https://vulnogram.org/CVE-2024-10238 https://vulnogram.org/CVE-2024-10238 A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6. An attacker can upload a specially crafted image that will cause a stack overflow is caused by not checking fld->used_bytes. High Tue, 04 Feb 2025 08:00:51 GMT https://vulnogram.org/CVE-2024-10237 https://vulnogram.org/CVE-2024-10237 There is a vulnerability in the BMC firmware image authentication design at Supermicro MBD-X12DPG-OA6 . An attacker can modify the firmware to bypass BMC inspection and bypass the signature verification process High Tue, 04 Feb 2025 07:59:26 GMT