PT-2026-63327 · Smci · X14Dbg-Dap

CVE-2026-3821 · Publicado 2026-07-22 · Atualizado 2026-07-22

Mitre

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-3821

Produtos afetados

X14Dbg-Dap

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-3821 · Nota de Segurança
• https://supermicro.com/en/support/security_BMC_IPMI_Jul_2026 · Nota