VULNERABILITY INTELLIGENCE

CVE-2026-12943

CVSS score9.8 CRITICAL
EPSS probability0.76%
CISA KEVNot currently listed
Published2026-07-30
Last modified2026-08-10
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

Weakness classification

  • psirt@us.ibm.com: CWE-78

Primary references