Vulnerability intelligence

CVE-2026-12943

IBM HMC V10.3.1050.0 CWE-78

IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.8%

Riskier than 54% of all CVEs · checked 2026-10-05

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories