CVE-2026-12943

CRITICAL

This Power Hardware Management Console update is being released to address

Title source: cna

Description

IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory patch

https://www.ibm.com/support/pages/node/7278667

Scores

CVSS v3 9.8

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-78

Status published

Products (2)

IBM/HMC V10.3.1050.0 10.3.1050.0 - 10.3.1064.0

IBM/HMC V11.1.1110.0 11.1.1110.0 - 11.1.1112.0

Published Jul 30, 2026

Tracked Since Jul 31, 2026