Supermicro BMC Safety Instructions September 2026

In September 2026, Supermicro published a security bulletin on CVE-2026-33197. There is a potential security vulnerability that could allow an attacker to generate additional UEFI boot entries and to boot into the UEFI shell. The pre-boot environment can be manipulated by using shell scripts, for example, to overwrite Secure Boot memory values or to execute malware early in the system boot process.

Overview

Security vulnerability	Risk potential:
CVE-2026-33197	8.7 (high)

Solution for problem

Supermicro published a BIOS update, which is able to solve the problem. It is recommended to verify the release notes of the corresponding version.

Updates for Thomas-Krenn products

Updates on the corresponding system can be found in the download area of Thomas-Krenn. The versions have been tested by us to guarantee the stability and compatibility of our systems.

If you require the latest version for your system and it is not yet available in our download area, you can get it at Supermicro.

Author: Thomas-Krenn.AG At Thomas-Krenn.AG we pay attention to the best possible service. To do justice to this, we have created our Thomas-Krenn Wiki. Here we share our knowledge with you and inform you about basics and news from the IT world. You like our knowledge culture and want to become part of the team? Visit our job offers.

Translator: Alina Ranzinger Alina has been working at Thomas-Krenn.AG since 2024. After her training as multilingual business assistant, she got her job as assistant of the Product Management and is responsible for the translation of texts and for the organisation of the department.