This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-18451 | BDVDB-2026-396181 Detail

SMCIMBD-X12SPI

Description#

The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session.

Impact#

CAPEC-59: Session Hijacking

Weaknesses#

  • CWE-337 Predictable Seed in a Pseudo-Random Number Generator (PRNG)

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.