SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-3821

HIGH · CVSS 8.8 EPSS 0.36% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-22 · Last synced 2026-08-21

CyberRota Analysis

AI-Generated

Supermicro's SMASH services in the X14DBG-DAP and X14DBI products are vulnerable to arbitrary code execution, allowing an authorized attacker to manipulate input and potentially compromise data integrity or initiate a Denial-of-Service (DoS) attack on the Baseboard Management Controller (BMC). Organizations utilizing these specific Supermicro products should prioritize remediation efforts to mitigate the risk of exploitation and ensure system stability.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-3821
Severity
HIGH
CVSS
8.8
EPSS
0.36%

Original NVD Description

Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.