Vulnerabilities in Supermicro BMC firmware, July 2026
Vulnerability Disclosure:
The purpose of this disclosure is to communicate the potential vulnerabilities affecting Supermicro products that were reported by an external researcher.
Acknowledgement:
Supermicro acknowledges the independent discovery of this vulnerability in its BMC Firmware by independent security researcher Anton Beidin and the research team at Eclypsium, Inc.
Summary:
A security issue has been discovered in select Supermicro boards. This issue affects Supermicro BMC Firmware.
| CVE ID | Severity | Issue Type | Description |
|---|---|---|---|
| High | Arbitrary code execution | Supermicro (SMC) SMASH services contain an Arbitrary code execution issue. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC. 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products:
CVE-2026-3821
| Motherboard | BMC FW Version with the Fix |
|---|---|
| MBD-X13DEG-QT | 01.08.09 |
| MBD-X13QEH+ | 01.08.09 |
| MBD-X13SET-G | 01.08.09 |
| MBD-X13SET-GC | 01.08.09 |
| MBD-X13SEI-TF | 01.08.10 |
| MBD-X13DGU | 01.08.10 |
| MBD-X13DEI | 01.05.20 |
| MBD-X13DEI-T | 01.05.20 |
| MBD-X13DEG-OA | 01.08.10 |
| MBD-X13DEG-R | 01.08.10 |
| MBD-X13SEW-F | 01.08.10 |
| MBD-X13SEW-TF | 01.08.10 |
| MBD-X13DDW-A | 01.08.10 |
| MBD-X13SEI-F | 01.08.10 |
| MBD-X13SCL-IF | 01.05.05 |
| MBD-X13SCD-F | 01.03.07 |
| MBD-X13SCH-SYS | 01.05.05 |
| MBD-X13SCL-F | 01.05.05 |
| MBD-X13SCH-F | 01.05.05 |
| MBD-X13SCH-LN4F | 01.05.05 |
| MBD-H13SSL-N | 01.09.05 |
| MBD-H13SSW | 01.09.05 |
| MBD-H13SST-G | 01.09.05 |
| MBD-H13SST-GC | 01.09.05 |
| MBD-H13DSH | 01.09.05 |
| MBD-H13DSG-O-CPU | 01.09.05 |
| MBD-H13SSL-NT | 01.09.05 |
| MBD-H13SVW-NT | 01.08.05 |
| MBD-H13SVW-N | 01.08.05 |
| MBD-H13SRD-F | 01.05.08 |
| MBD-H13SAE-MF | 01.09.02 |
| MBD-H13SRE-F | 01.05.08 |
| MBD-H13SRA-F | 01.05.07 |
| MBD-H13SRA-TF | 01.05.07 |
| MBD-H14DSG-O-CPU | 01.07.05.01 |
| MBD-H14SST-G | 01.07.05.01 |
| MBD-H14DSH | 01.07.05.01 |
| MBD-H14SSL-N | 01.07.05.01 |
| MBD-H14SSL-NT | 01.07.05.01 |
| MBD-H14SST-GE | 01.07.05.01 |
| MBD-X13SEB-TF | 01.08.00 |
| MBD-H12SSW-iNR | 01.08.06 |
| MBD-H12DSU-iNR | 01.04.11 |
| MBD-H12DGO-6 | 01.06.04 |
| MBD-H12SSL-NT | 01.08.03 |
| MBD-H12SSL-CT | 01.08.03 |
| MBD-H12SSL-C | 01.08.03 |
| MBD-H12SSL-i | 01.08.03 |
| MBD-H12DSG-Q-CPU6 | 01.06.04 |
| MBD-H12DSG-O-CPU | 01.08.06 |
| MBD-H12SSW-NTR | 01.08.06 |
| MBD-X12DGO-6 | 01.09.04 |
| MBD-X12DSC-6 | 01.08.01 |
| MBD-X12DGU | 01.15.01 |
| MBD-X12SPT-G | 01.07.04 |
| MBD-H12DGQ-NT6 | 01.06.33 |
| MBD-H12DSi-NT6 | 01.06.32 |
| MBD-H12SSFR-AN6 | 01.06.32 |
| MBD-H12DSi-N6 | 01.06.32 |
| MBD-H12SSW-AN6 | 01.06.32 |
| MBD-X12DPG-U6 | 01.08.06 |
| MBD-X12DAI-N6 | 01.08.08 |
| MBD-X12SPZ-LN4F | 01.08.08 |
| MBD-X12SPi-TF | 01.07.20 |
| MBD-X12SPO-NTF | 01.07.20 |
| MBD-X12SPW-TF | 01.07.22 |
| MBD-X12SPZ-SPLN6F | 01.08.08 |
| MBD-X12DPG-QT6 | 01.07.20 |
| MBD-X12DSC-A6 | 01.07.22 |
| MBD-X12SPW-F | 01.07.22 |
| MBD-X12SPM-TF | 01.07.20 |
| MBD-X12SPM-LN4F | 01.07.20 |
| MBD-X12SPL-LN4F | 01.07.22 |
| MBD-X12SPL-F | 01.07.22 |
| MBD-X12DPL-NT6 | 01.07.20 |
| MBD-X12DPL-i6 | 01.07.20 |
| MBD-X12DPG-QBT6 | 01.05.39 |
| MBD-X12SPED-F | 01.07.20 |
| MBD-X12DPU-6 | 01.08.09 |
| MBD-X12SPO-F | 01.07.20 |
| MBD-X12DPi-NT6 | 01.08.08 |
| MBD-X12DPi-N6 | 01.08.08 |
| MBD-X12SPM-LN6TF | 01.07.20 |
| MBD-X12DHM-6 | 01.08.08 |
| MBD-X12DPG-AR | 01.08.08 |
| MBD-X12DDW-A6 | 01.08.08 |
| MBD-X12DPFR-AN6 | 01.08.08 |
| MBD-X13SWA-TF | 01.09.04 |
| MBD-X13SRA-TF | 01.09.04 |
| MBD-X13SAZ-F | 01.04.21 |
| MBD-X13SAE-F | 01.04.22 |
| MBD-X12SDV-4C-SPT8F | 01.11.01 |
| MBD-X12STL-F | 01.06.15 |
| MBD-X12STD-F | 01.06.16 |
| MBD-X12STE-F | 01.06.15 |
| MBD-X12STH-SYS | 01.06.15 |
| MBD-X12STH-LN4F | 01.06.15 |
| MBD-X12SDV-14C-SPT8F | 01.11.01 |
| MBD-X12SDV-10CR-SP6F | 01.11.01 |
| MBD-X12STL-IF | 01.06.15 |
| MBD-X12STH-F | 01.06.15 |
| MBD-X12SDV-10C-SPT4F | 01.11.01 |
| MBD-X12SDV-8C-SPT4F | 01.11.01 |
| MBD-X12SDV-4C-SPT4F | 01.11.01 |
| MBD-X12SDV-10C-SP6F | 01.11.01 |
| MBD-X12SDV-8CE-SP4F | 01.11.01 |
| MBD-X12SDV-8C-SP6F | 01.11.01 |
| MBD-X12SDV-4C-SP6F | 01.11.01 |
| MBD-X12SDV-20C-SPT8F | 01.11.01 |
| MBD-X12SDV-16C-SPT8F | 01.11.01 |
| MBD-X12SDV-8C-SPT8F | 01.11.01 |
| MBD-M12SWA-TF | 01.06.32 |
| MBD-X12SCZ-QF | 01.08.06 |
| MBD-X12SCZ-F | 01.08.06 |
| MBD-X12SCZ-TLN4F | 01.08.06 |
| MBD-X12SCA-F | 01.04.13 |
| MBD-A3SSV-8C-SPLN10F | 1.5.32 |
| MBD-A3SSV-16C-SPLN10F | 1.5.32 |
| MBD-A3SSV-24C-SPLN10F | 1.5.32 |
| MBD-A3SPI-4C-LN6PF-01 | 1.5.31 |
| MBD-A3SPI-8C-LN6PF-01 | 1.5.31 |
| MBD-A3SPI-8C-LN6PF | 1.5.31 |
| MBD-A3SPI-8C-HLN4F | 1.5.31 |
| MBD-A3SPI-4C-LN6PF | 1.5.31 |
| MBD-A3SPI-4C-HLN4F | 1.5.31 |
| MBD-X12SPG-NF | 1.05.32 |
| MBD-X12SPA-TF | 1.05.33 |
| MBD-X12QCH+ | 01.05.34 |
| MBD-X12DPi-N | 01.15.01 |
| MBD-X12DPI-NT | 01.15.01 |
| MBD-H13DSG-O-CPU-D | 01.08.03 |
| MBD-X13DEG-OAD | 01.08.12 |
| MBD-X13DEG-PVC | 01.08.11 |
| MBD-X13DEG-MA | 01.08.11 |
| MBD-X13DEG-M | 01.08.11 |
| MBD-X13DEG-D | 01.08.11 |
| SSE-T7132S | 01.00.08 |
| SSE-T7132SR | 01.00.08 |
| SSE-T8164S | 01.13.01 |
| SSE-T8196S | 01.13.01 |
| MBD-X14DBHM | 01.06.01.02 |
| MBD-H14SHM | 01.06.00.04 |
| MBD-X14DBI | 01.06.04.13 |
| MBD-X14DBI-T | 01.06.04.13 |
| MBD-X14SBI-F | 01.06.06.00 |
| MBD-X14DBG-AP | 01.06.04.12 |
| MBD-X14SBI-TF | 01.06.06.00 |
| MBD-X14SBW-TF | 01.06.04.13 |
| MBD-X14SBW-F | 01.06.04.13 |
| MBD-X14SAE-F | 01.03.11.01 |
| MBD-X14SAV-F | 01.03.12.01 |
| MBD-X14SAV-LVDS | 01.03.12.01 |
| MBD-X14SAV-TLN4F | 01.03.12.01 |
| MBD-X14SAZ-F | 01.03.12.02 |
| MBD-X14SAZ-TLN4F | 01.03.12.02 |
| MBD-X14DBG-DAP | 01.03.02.13 |
| MBD-H14SRV-HLN4F | 01.06.15.00 |
| MBD-X11DPD-M25 | 3.77.18 |
| MBD-X11DSF-E | 3.77.18 |
| MBD-X11DPS-RE | 3.77.26 |
| MBD-X11DGQ | 3.77.18 |
| MBD-X11DSC+ | 3.77.18 |
| MBD-X11DPL-I | 3.77.18 |
| MBD-X11SCW-F | 3.77.18 |
| MBD-X11DPFF-SN | 3.77.18 |
| MBD-X11DPT-L | 3.77.18 |
| MBD-X11DPFF-SNR | 1.01.36 |
| MBD-H12SSFF-AN6 | 01.07.11 |
| MBD-X12DPG-QR | 01.08.11 |
| MBD-X12DGQ-R | 01.08.11 |
| MBD-B12DPE-6 | 01.10.01 |
| MBD-B12SPE-CPU-25G | 01.08.11 |
| MBD-X12DPG-OA6-GD2 | 01.08.11 |
| MBD-X12SPT-PT | 01.11.11 |
| MBD-X12DPT-PT6 | 01.11.11 |
| MBD-X12DPD-A6M25 | 01.11.11 |
| MBD-X12DPG-OA6 | 01.08.11 |
| MBD-X12DPT-B6 | 01.11.11 |
| MBD-B12DPT-6 | 01.07.11 |
| MBD-B3ST1-CPU-001 | 01.08.11 |
| MBD-BH12SSi-M25 | 01.11.11 |
| MBD-B12DPT | 01.11.11 |
| MBD-X13SEED-SF | 01.09.11 |
| MBD-X13SEM-TF | 01.09.11 |
| MBD-X13SEED-F | 01.09.11 |
| MBD-X13SEVR-SP13F | 01.09.11 |
| MBD-X13SET-PT | 01.09.11 |
| MBD-X13SEM-F | 01.09.11 |
| MBD-X13DET-B | 01.09.11 |
| MBD-X13DSF-A | 01.13.04 |
| MBD-X13SEDW-F | 01.09.11 |
| MBD-X13DEM | 01.09.11 |
| MBD-X13SEFR-A | 01.09.11 |
| MBD-X13SCW-F | 01.09.11 |
| MBD-X13SAW-F | 01.09.11 |
| MBD-X13SAW-TLN4F | 01.09.11 |
| MBD-H13SSF | 01.09.11 |
| MBD-H13SSH | 01.09.11 |
| MBD-H13SRH | 01.09.11 |
| MBD-H13QSH | 01.09.11 |
| MBD-H13SSH-E | 01.09.11 |
| MBD-B13DET | 01.09.11 |
| MBD-B13DEE | 01.09.11 |
| MBD-B13SEG | 01.09.11 |
| MBD-B13SEE-CPU-25G | 01.09.11 |
| MBD-X13OEI | 01.07.11 |
| MBD-X13OEI-CPU | 01.07.11 |
| MBD-H13DSG-OM | 01.09.11 |
| MBD-X13DEH | 01.09.11 |
| MBD-G1SMH | 01.08.11 |
| MBD-G1SMH-G | 01.08.11 |
| MBD-X14SDV-20C-SP3F | 01.07.00.11 |
| MBD-X14SDV-32C-SP3F | 01.07.00.11 |
| MBD-X14SDV-36C-SP3F | 01.07.00.11 |
| MBD-X14DBT-B | 01.07.00.11 |
| MBD-X14DBM-APL | 01.07.00.11 |
| MBD-X14SBH-AP | 01.07.00.11 |
| MBD-X14DBT-FAP | 01.07.00.11 |
| MBD-X14SDV-42C-SP3F | 01.07.00.11 |
| MBD-X14SDV-36CE-SP3F | 01.07.00.11 |
| MBD-X14SDV-36CE-SP9F | 01.07.00.11 |
| MBD-X14SDV-20C-SP9F | 01.07.00.11 |
| MBD-X14SDV-32C-SP9F | 01.07.00.11 |
| MBD-X14SDV-36C-SP9F | 01.07.00.11 |
| MBD-X14SDV-42C-SP9F | 01.07.00.11 |
| MBD-X14SDW-36CE-SP9F | 01.07.00.11 |
| MBD-X14SDW-36C-SP9F | 01.07.00.11 |
| MBD-X14SDW-40C-SP9F | 01.07.00.11 |
| MBD-X14SDW-42C-SP9F | 01.07.00.11 |
| MBD-X14SDW-72C-SP9F | 01.07.00.11 |
| MBD-X14SDW-64C-SP9F | 01.07.00.11 |
| MBD-X14SDW-64CM-SP9F | 01.07.00.11 |
| MBD-X14QBH+ | 01.07.00.11 |
| MBD-X14DBM-SP | 01.07.00.11 |
| MBD-X14SBM-TF | 01.07.00.11 |
| MBD-X14SBM-TP4F | 01.07.00.11 |
| MBD-X14SBH | 01.07.00.11 |
| MBD-X14DBM-AP | 01.07.00.11 |
| MBD-BH4SRG | 01.08.11 |
| MBD-B4SA1-CPU | 01.08.11 |
| MBD-B4SC1-CPU | 01.08.11 |
| MBD-X14SBGM | 01.06.00.11 |
| MBD-X14DBG-MAP | 01.06.00.11 |
| MBD-G2DMH-GI | 01.06.00.11 |
| MBD-B3SD1-20C-25G | 01.11.11 |
| MBD-X14SBHM | 01.06.00.11 |
| MBD-B14DBE | 01.06.00.11 |
| MBD-B14SBE-CPU-25G | 01.06.00.11 |
| MBD-B14DBT | 01.06.00.11 |
| MBD-X14DBG-GD | 01.06.00.11 |
| MBD-X14DBG-XAP | 01.06.00.11 |
| MBD-X14SBT-GAP | 01.06.00.11 |
| MBD-X14SBT-G | 01.06.00.11 |
| MBD-H14DST-F | 01.07.00.11 |
| MBD-H14DST-FL | 01.07.00.11 |
| MBD-X14DBG-LC+ | 01.07.00.11 |
| MBD-X14DBG-LC | 01.07.00.11 |
| MBD-H14DSG-OD | 01.07.00.11 |
| MBD-H14DSG-OM | 01.07.00.11 |
| MBB-CMM-6 | 01.03.03 |
| MBM-CMM-6 | 01.03.03 |
| MBD-B14SBE-CPU-AP | 01.06.00.04 |
Remediation:
All affected Supermicro motherboard SKUs will require a BMC update to mitigate these potential vulnerabilities.
Updated BMC firmware has been created to mitigate these potential vulnerabilities. Supermicro is currently testing and validating affected products. Please check Release notes for the resolution.
Exploitation and Public Announcements:
Supermicro is not aware of any malicious use of these vulnerabilities in the wild.