Unauthorized Account Access Vulnerability in IBM Storage TS4500 Library
CVE-2026-19133

8.1HIGH

Key Information:

Vendor

IBM
Status
Storage Ts4500 Library
Vendor
CVE Published:
8 November 2026

What is CVE-2026-19133?

The IBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 are susceptible to a security flaw that allows a remote authenticated attacker to execute unauthorized actions leading to account takeover. This vulnerability arises from improper authorization checks, which may compromise user accounts and sensitive data. Organizations using affected versions should review their security posture and apply the necessary patches provided by IBM.

Affected Version(s)

Storage TS4500 Library 1.1.1.6 <= 1.12.0.3

References

https://www.ibm.com/support/pages/node/7292609
vendor-advisorypatch

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.