CVE-2026-12943
This Power Hardware Management Console update is being released to address
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th
IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
| CWE | CWE-78 |
| Vendor | ibm |
| Product | hmc v10.3.1050.0 |
| Published | Jul 30, 2026 |
| Last Updated | Jul 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for ibm hmc v10.3.1050.0
Be the first to know when new critical vulnerabilities affecting ibm hmc v10.3.1050.0 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
IBM / HMC V10.3.1050.0
10.3.1050.0 ≤ 10.3.1064.0
IBM / HMC V11.1.1110.0
11.1.1110.0 ≤ 11.1.1112.0