Race Condition Vulnerability in IBM Storage TS4500 Library
CVE-2026-19178

6.8MEDIUM

Key Information:

Vendor

IBM
Status
Storage Ts4500 Library
Vendor
CVE Published:
19 October 2026

What is CVE-2026-19178?

The IBM Storage TS4500 Library is affected by a vulnerability that allows a remote authenticated attacker to exploit a race condition, potentially granting them unauthorized administrative privileges. This issue persists across versions 1.1.1.6 to 1.12.0.3. It's crucial for users to review the vendor's advisory and apply the appropriate patch to mitigate the risk associated with this vulnerability.

Affected Version(s)

Storage TS4500 Library 1.1.1.6 <= 1.12.0.3

References

https://www.ibm.com/support/pages/node/7292610
vendor-advisorypatch

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.