A Vulnerability in AMI MegaRAC Software Could Allow for Remote Code Execution

**Executive summary:** A vulnerability in AMI MegaRAC BMC's Redfish host interface can be exploited to bypass authentication and achieve remote code execution, potentially allowing full server control, malware or ransomware deployment, firmware tampering, and permanent hardware damage; the issue is mapped to ATT&CK T1190 (Exploit Public‑Facing Application) and TA0001 (Initial Access).