CVE-2026-18451 | BDVDB-2026-396181 Detail
SMCIMBD-X12SPI
Description#
The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session.
Impact#
CAPEC-59: Session Hijacking
Weaknesses#
- CWE-337 Predictable Seed in a Pseudo-Random Number Generator (PRNG)
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.