AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-12943

IBM HMC: remote code execution

IBM

CVE-2026-12943 · Published Jul 30, 2026 · updated Aug 10, 2026

Critical9.8
No fix yet
IBM advisory

IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

Affected versions

PackageAffectedFixed in
HMC V10.3.1050.0
Product
>= 10.3.1050.0, <= 10.3.1064.0No fix yet
HMC V11.1.1110.0
Product
>= 11.1.1110.0, <= 11.1.1112.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More IBM advisories

All IBM
High 8.5Jul 30IBM WebSphere Application Server: remote code executionCVE-2026-11536no fix yetCritical 9.9Jul 30IBM Langflow OSS: code injectionCVE-2026-12946no fix yetMedium 4.3Jul 30UCD - IBM: information disclosureCVE-2026-10569no fix yetCritical 9.9Jul 30IBM Langflow OSS: improper input validationCVE-2026-13435no fix yetHigh 8.1Jul 30IBM Langflow OSS: attacker could access another user's private vectorCVE-2026-13444no fix yetHigh 7.5Jul 30IBM Langflow OSS: path traversalCVE-2026-12942no fix yet