{"metadata": {"vulnerability": "CVE-2026-18450", "count": 15, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-07-31T05:37:15.403Z", "date_only": false, "value": "2026-07-31T05:37:15.403Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-18450", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-27T07:46:02.598Z", "date_only": false, "value": "2026-10-27T07:46:02.598Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18450", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T07:46:02.598Z", "date_only": false, "value": "2026-10-27T07:46:02.598Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-18450", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-27T07:46:02.598Z", "date_only": false, "value": "2026-10-27T07:46:02.598Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Supermicro", "record": "CVE-2026-18450", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-27T08:00:00.637Z", "date_only": false, "value": "2026-10-27T08:00:00.637813Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117511815171216053", "record": "CVE-2026-18450", "field": "creation_timestamp", "uuid": "7e5b2915-5210-47c9-8b70-baa1f6ff27d7", "content": "CVE-2026-18450 Supermicro BMC  contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.\nhttps://www.cve.org/CVERecord?id=CVE-2026-18450https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1#SMCI #X12SPI#CVE_2026_18450#bot", "url": "https://infosec.exchange/users/cve/statuses/117511815171216053"}, {"timestamp": "2026-10-27T08:16:53Z", "date_only": false, "value": "2026-10-27T08:16:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4GMH-3V9M-9469", "record": "GHSA-4GMH-3V9M-9469", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-27T08:16:53.710Z", "date_only": false, "value": "2026-10-27T08:16:53.710", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18450", "record": "FKIE_CVE-2026-18450", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T08:30:05.728Z", "date_only": false, "value": "2026-10-27T08:30:05.728491Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mytt2i6vtm24", "record": "CVE-2026-18450", "field": "creation_timestamp", "uuid": "67537241-87f1-4901-b5f7-8e7d02ef8ddd", "content": "CVE-2026-18450 - x12spi\nThe management controller in Supermicro X12SPI servers does not properly check that IPMI commands are protected with integrity and encryption. An attacker who can intercept an active\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#x12spi #smci #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mytt2i6vtm24"}, {"timestamp": "2026-10-27T08:46:48.902Z", "date_only": false, "value": "2026-10-27T08:46:48.902659Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3myttyei3d32s", "record": "CVE-2026-18450", "field": "creation_timestamp", "uuid": "1f0093d3-02d5-4141-9a92-17585e541462", "content": "\ud83d\udd34 CVE-2026-18450 - Critical (9.8)\n\nThe BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An at...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18450/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3myttyei3d32s"}, {"timestamp": "2026-10-27T09:15:07.823Z", "date_only": false, "value": "2026-10-27T09:15:07.823472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fc-vulns.bsky.social/post/3mytvkyjqr62l", "record": "CVE-2026-18450", "field": "creation_timestamp", "uuid": "f91ad27d-12f8-48b9-a864-181066c78bf0", "content": "CVE-2026-18450 published 2026-10-27 \u2014 CVSS 9.8 v3.1.\n\nAn attacker may be able to craft packets that execute arbitrary commands on an active session.\n\nDon\u2019t miss this critical one.\n\nhttps://www.fc-vulns.com/cve/CVE-2026-18450/\n\n#fcvulns #CWE306", "url": "https://bsky.app/profile/fc-vulns.bsky.social/post/3mytvkyjqr62l"}, {"timestamp": "2026-10-27T09:30:59Z", "date_only": false, "value": "2026-10-27T09:30:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4GMH-3V9M-9469", "record": "GHSA-4GMH-3V9M-9469", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T09:30:59Z", "date_only": false, "value": "2026-10-27T09:30:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4GMH-3V9M-9469", "record": "GHSA-4GMH-3V9M-9469", "field": "modified"}, {"timestamp": "2026-10-27T10:07:05.473Z", "date_only": false, "value": "2026-10-27T10:07:05.473904Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mytyhw46vo2y", "record": "CVE-2026-18450", "field": "creation_timestamp", "uuid": "58d79788-5584-46c4-80c8-9cbf3329bd27", "content": "\ud83d\udea8 CVE-2026-18450 \u2014 CVSS 9.8 CRITICAL\n\nThe BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-18450\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mytyhw46vo2y"}, {"timestamp": "2026-10-27T15:54:05.340Z", "date_only": false, "value": "2026-10-27T15:54:05.340", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18450", "record": "FKIE_CVE-2026-18450", "field": "lastModified"}, {"timestamp": "2026-10-28T01:35:34.725Z", "date_only": false, "value": "2026-10-28T01:35:34.725677Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3myvme5twnf2q", "record": "CVE-2026-18450", "field": "creation_timestamp", "uuid": "4700064a-087e-4495-8cfc-d6d69d880e1c", "content": "Supermicro BMC vulnerabilities hit 392 boards. Critical IPMI flaw CVE-2026-18450 (CVSS 9.8) lets attackers run commands. Update BMC firmware now.\n\n#Supermicro #BMC #IPMI #CVE202618450 #FirmwareSecurity #runZero #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3myvme5twnf2q"}], "metrics": {"as_of": "2026-10-31T01:48:59.568Z", "anchors": {"origin": {"timestamp": "2026-10-27T07:46:02.598Z", "date_only": false, "value": "2026-10-27T07:46:02.598Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18450", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-27T07:46:02.598Z", "date_only": false, "value": "2026-10-27T07:46:02.598Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18450", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 324176.970622, "hours": 90.04915850611111, "days": 3.752048271087963, "min_seconds": 324176.970622, "max_seconds": 324176.970622, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T07:46:02.598Z", "date_only": false, "value": "2026-10-27T07:46:02.598Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18450", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T01:48:59.568Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}