CVEvulnerability

CVE-2026-12943

9.8 CRITICAL Published 2026-07-30 Modified 2026-08-10 Official page ↗
Status
Analyzed
Published
2026-07-30
Last modified
2026-08-10
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78

Description

IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

Affected configurations

• ibm hardware management console (>= 10.3.1050.0 < 10.3.1064.1) • ibm hardware management console (>= 11.1.1110.0 < 11.1.1112.1)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References