CVE-2026-5935

HIGH

IBM TSSC/TS4500 IMC 9.2 to 9.6 - OS Command Injection

Title source: manual
STIX 2.1

Description

IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory patch
https://www.ibm.com/support/pages/node/7270127

Scores

CVSS v3 7.3
EPSS 0.0026
EPSS Percentile 17.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-78
Status published
Products (11)
IBM/Total Storage Service Console (TSSC) / TS4500 IMC 9.2.0 - 9.6.0
ibm/total_storage_service_console 9.2
ibm/total_storage_service_console 9.3
ibm/total_storage_service_console 9.4
ibm/total_storage_service_console 9.5
ibm/total_storage_service_console 9.6
ibm/ts4500_imc 9.2
ibm/ts4500_imc 9.3
ibm/ts4500_imc 9.4
ibm/ts4500_imc 9.5
... and 1 more
Published Apr 23, 2026
Tracked Since Apr 23, 2026