VULNERABILITY INTELLIGENCE
CVE-2026-3821
CVSS score8.8 HIGH
EPSS probability0.64%
CISA KEVNot currently listed
Published2026-07-22
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.
Weakness classification
- def9a96e-e099-41a9-bfac-30fd4f82c411: CWE-78