Command Execution Vulnerability in IBM Storage Copy Data Management
CVE-2026-119670

6.3MEDIUM

Key Information:

Vendor

IBM
Status
Storage Copy Data Management
Vendor
CVE Published:
8 November 2026

What is CVE-2026-119670?

IBM Storage Copy Data Management 2.2 may be susceptible to a vulnerability that permits authenticated users to execute arbitrary commands with regular user privileges. This occurs due to inadequate validation of supplied input, potentially leading to unauthorized actions within the system. Users of this software should review their configurations and apply any necessary patches to mitigate this security risk.

Affected Version(s)

Storage Copy Data Management 2.2

References

https://www.ibm.com/support/pages/node/7295286
vendor-advisorypatch

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.