Improper Input Validation in IBM Power Management Systems
CVE-2026-12943

9.8CRITICAL

Key Information:

Vendor

IBM
Status
Hmc V10.3.1050.0
Hmc V11.1.1110.0
Vendor
CVE Published:
30 July 2026

What is CVE-2026-12943?

IBM Power Management Systems (HMC) have a vulnerability that allows an unauthenticated user to execute arbitrary commands with elevated privileges. This issue arises due to inadequate validation of user-supplied input, potentially letting attackers manipulate the system. Users are advised to implement the latest security patches to mitigate risks associated with this security flaw.

Affected Version(s)

HMC V10.3.1050.0 10.3.1050.0 <= 10.3.1064.0

HMC V11.1.1110.0 11.1.1110.0 <= 11.1.1112.0

References

https://www.ibm.com/support/pages/node/7278667
vendor-advisorypatch

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.