Vulnerability intelligence

CVE-2026-12943

IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

CVSS Score

—

Critical

EPSS — Exploit Probability

0.9%

Riskier than 57% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

unknown

Check vendor advisories

NVD entry

1 article across 1 outlet · first covered Jul 7, 2026 · latest Jul 7, 2026

Coverage timeline

IBM patches critical HMC flaw letting hackers run system commands
securityonline.info · Jul 7, 2026