{
  "id": 224669,
  "title": "Buggy microcontrollers making up some of the world's most important servers can be easily backdoored",
  "url": "https://urgent.news/2026/08/06/buggy-microcontrollers-making-up-some-of-the-worlds-most-important",
  "topic": "science",
  "section": "Science",
  "published": "2026-08-06T13:26:45.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/pro/security/buggy-microcontrollers-making-up-some-of-the-worlds-most-important-servers-can-be-easily-backdoored"
  },
  "original_language": "en",
  "account": "Security researchers from runZero disclosed over a dozen new vulnerabilities in baseboard management controllers (BMCs) used in numerous enterprise servers. BMCs, specialized hardware components introduced in the late 1990s, enable administrators to remotely monitor and manage servers' hardware, even when the system is powered off. Found at the Black Hat security conference, the flaws were disclosed by HD Moore of runZero, raising concerns regarding a widespread and under-patched parallel attack surface.\n\nAccording to Moore, the vulnerabilities found in BMCs from HPE, Supermicro, Avocent, Huawei, Lenovo, and Dell pose a significant risk. During two scans conducted, 86,000 exposed BMCs were discovered in internet-connected devices, with 54% of them carrying at least one of the flaws. Internally, a survey of over 120,000 BMCs revealed that 29% were affected by at least one critical vulnerability.\n\nWhile many of the flaws can only be exploited with prior authentication, Moore highlighted that smaller pre-authentication flaws also exist and could be abused by well-equipped threat actors. The researchers cautioned that details about the vulnerabilities will remain undisclosed until the affected manufacturers address the issues.",
  "summary": "Researchers found more than a dozen new flaws plaguing baseboard management controllers.",
  "key_points": [
    "Security researchers discover 12+ vulnerabilities in BMCs",
    "86,000 exposed BMCs found in internet-connected devices",
    "29% of surveyed BMCs have at least one critical vulnerability"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}