CVE-2026-12943

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-12943", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-06-22T19:55:16.119Z", "datePublished": "2026-07-30T17:57:46.718Z", "dateUpdated": "2026-07-31T03:56:18.697Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-07-30T17:57:46.718Z"}, "title": "This Power Hardware Management Console update is being released to address", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "HMC V10.3.1050.0", "versions": [{"status": "affected", "version": "10.3.1050.0", "lessThanOrEqual": "10.3.1064.0", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:hmc_v10310500:10.3.1050.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:hmc_v10310500:10.3.1064.0:*:*:*:*:*:*:*"]}, {"vendor": "IBM", "product": "HMC V11.1.1110.0", "versions": [{"status": "affected", "version": "11.1.1110.0", "lessThanOrEqual": "11.1.1112.0", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:hmc_v11111100:11.1.1110.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:hmc_v11111100:11.1.1112.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7278667", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 9.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\u00a0The following fixes are available on IBM Fix Central at:\n\n\n\nV10R3\n\n\n\n https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~9100HMCppc&release=V10R3&platform=All \n\n\n\n https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~vHMC&release=V10R3&platform=All \n\n\n\nV11R1\n\n\n\n https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~9100HMCppc&release=V11R1&platform=All \n\n\n\n https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~vHMC&release=V11R1&platform=All \n\n\n\n\n\n\n\n\n\nProduct\n\nAffected Version(s)\n\nVRMF\n\nAPAR\n\nRemediation/Fix\n\nPower HMC\n\nV10.3.1050.0 - V10.3.1064.0\n\nV10.3.1064.1 x86\n\n\n\nMB04527\n\n\n\nMF71762\n\nPower HMC\n\nV10.3.1050.0 - V10.3.1064.0\n\nV10.3.1064.1 ppc\n\n\n\nMB04528\n\n\n\nMF71763\n\nPower HMC\n\nV11.1.1110.0 - V11.1.1112.0\n\nV11.1.1112.1 x86\n\n\n\nMB04529\n\n\n\nMF71764\u00a0\n\n\n\n\n\nPower HMC\n\nV11.1.1110.0 - V11.1.1112.0\n\nV11.1.1112.1 ppc\n\nMB04530\n\nMF71765", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><p>IBM strongly recommends addressing the vulnerability now.\u00a0The following fixes are available on IBM Fix Central at:</p><p>V10R3</p><p><a href=\"https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~9100HMCppc&amp;release=V10R3&amp;platform=All\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~9100HMCppc&amp;release=V10R3&amp;platform=All</a></p><p><a href=\"https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~vHMC&amp;release=V10R3&amp;platform=All\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~vHMC&amp;release=V10R3&amp;platform=All</a></p><p>V11R1</p><p><a href=\"https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~9100HMCppc&amp;release=V11R1&amp;platform=All\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~9100HMCppc&amp;release=V11R1&amp;platform=All</a></p><p><a href=\"https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~vHMC&amp;release=V11R1&amp;platform=All\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~vHMC&amp;release=V11R1&amp;platform=All</a></p><p></p><p></p><div><table><tbody><tr><td><div>Product</div></td><td><div>Affected Version(s)</div></td><td><div>VRMF</div></td><td><div>APAR</div></td><td><div>Remediation/Fix</div></td></tr><tr><td><div>Power HMC</div></td><td><div>V10.3.1050.0 - V10.3.1064.0</div></td><td><div>V10.3.1064.1 x86</div></td><td><p>MB04527</p></td><td><p>MF71762</p></td></tr><tr><td><div>Power HMC</div></td><td><div>V10.3.1050.0 - V10.3.1064.0</div></td><td><div>V10.3.1064.1 ppc</div></td><td><p>MB04528</p></td><td><p>MF71763</p></td></tr><tr><td><div>Power HMC</div></td><td><div>V11.1.1110.0 - V11.1.1112.0</div></td><td><div>V11.1.1112.1 x86</div></td><td><p>MB04529</p></td><td><div><div><p>MF71764\u00a0</p></div></div></td></tr><tr><td><div>Power HMC</div></td><td><div>V11.1.1110.0 - V11.1.1112.0</div></td><td><div>V11.1.1112.1 ppc</div></td><td>MB04530</td><td><div><div><p>MF71765\u00a0</p></div></div></td></tr></tbody></table></div></div><div></div><p></p>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-30T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-12943"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-31T03:56:18.697Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-12943", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-30T18:39:21.327190Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-30T18:39:31.353Z"}}], "cna": {"title": "This Power Hardware Management Console update is being released to address", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:hmc_v10310500:10.3.1050.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:hmc_v10310500:10.3.1064.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "HMC V10.3.1050.0", "versions": [{"status": "affected", "version": "10.3.1050.0", "versionType": "semver", "lessThanOrEqual": "10.3.1064.0"}]}, {"cpes": ["cpe:2.3:a:ibm:hmc_v11111100:11.1.1110.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:hmc_v11111100:11.1.1112.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "HMC V11.1.1110.0", "versions": [{"status": "affected", "version": "11.1.1110.0", "versionType": "semver", "lessThanOrEqual": "11.1.1112.0"}]}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\u00a0The following fixes are available on IBM Fix Central at:\n\n\n\nV10R3\n\n\n\n https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~9100HMCppc&release=V10R3&platform=All \n\n\n\n https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~vHMC&release=V10R3&platform=All \n\n\n\nV11R1\n\n\n\n https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~9100HMCppc&release=V11R1&platform=All \n\n\n\n https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~vHMC&release=V11R1&platform=All \n\n\n\n\n\n\n\n\n\nProduct\n\nAffected Version(s)\n\nVRMF\n\nAPAR\n\nRemediation/Fix\n\nPower HMC\n\nV10.3.1050.0 - V10.3.1064.0\n\nV10.3.1064.1 x86\n\n\n\nMB04527\n\n\n\nMF71762\n\nPower HMC\n\nV10.3.1050.0 - V10.3.1064.0\n\nV10.3.1064.1 ppc\n\n\n\nMB04528\n\n\n\nMF71763\n\nPower HMC\n\nV11.1.1110.0 - V11.1.1112.0\n\nV11.1.1112.1 x86\n\n\n\nMB04529\n\n\n\nMF71764\u00a0\n\n\n\n\n\nPower HMC\n\nV11.1.1110.0 - V11.1.1112.0\n\nV11.1.1112.1 ppc\n\nMB04530\n\nMF71765", "supportingMedia": [{"type": "text/html", "value": "<div><p>IBM strongly recommends addressing the vulnerability now.\u00a0The following fixes are available on IBM Fix Central at:</p><p>V10R3</p><p><a href=\"https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~9100HMCppc&amp;release=V10R3&amp;platform=All\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~9100HMCppc&amp;release=V10R3&amp;platform=All</a></p><p><a href=\"https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~vHMC&amp;release=V10R3&amp;platform=All\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~vHMC&amp;release=V10R3&amp;platform=All</a></p><p>V11R1</p><p><a href=\"https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~9100HMCppc&amp;release=V11R1&amp;platform=All\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~9100HMCppc&amp;release=V11R1&amp;platform=All</a></p><p><a href=\"https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~vHMC&amp;release=V11R1&amp;platform=All\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~vHMC&amp;release=V11R1&amp;platform=All</a></p><p></p><p></p><div><table><tbody><tr><td><div>Product</div></td><td><div>Affected Version(s)</div></td><td><div>VRMF</div></td><td><div>APAR</div></td><td><div>Remediation/Fix</div></td></tr><tr><td><div>Power HMC</div></td><td><div>V10.3.1050.0 - V10.3.1064.0</div></td><td><div>V10.3.1064.1 x86</div></td><td><p>MB04527</p></td><td><p>MF71762</p></td></tr><tr><td><div>Power HMC</div></td><td><div>V10.3.1050.0 - V10.3.1064.0</div></td><td><div>V10.3.1064.1 ppc</div></td><td><p>MB04528</p></td><td><p>MF71763</p></td></tr><tr><td><div>Power HMC</div></td><td><div>V11.1.1110.0 - V11.1.1112.0</div></td><td><div>V11.1.1112.1 x86</div></td><td><p>MB04529</p></td><td><div><div><p>MF71764\u00a0</p></div></div></td></tr><tr><td><div>Power HMC</div></td><td><div>V11.1.1110.0 - V11.1.1112.0</div></td><td><div>V11.1.1112.1 ppc</div></td><td>MB04530</td><td><div><div><p>MF71765\u00a0</p></div></div></td></tr></tbody></table></div></div><div></div><p></p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7278667", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-07-30T17:57:46.718Z"}}}, "cveMetadata": {"cveId": "CVE-2026-12943", "state": "PUBLISHED", "dateUpdated": "2026-07-31T03:56:18.697Z", "dateReserved": "2026-06-22T19:55:16.119Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-07-30T17:57:46.718Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:hmc_v10310500:10.3.1050.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:hmc_v10310500:10.3.1064.0:*:*:*:*:*:*:*"], "product": "HMC V10.3.1050.0", "vendor": "IBM", "versions": [{"lessThanOrEqual": "10.3.1064.0", "status": "affected", "version": "10.3.1050.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:ibm:hmc_v11111100:11.1.1110.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:hmc_v11111100:11.1.1112.0:*:*:*:*:*:*:*"], "product": "HMC V11.1.1110.0", "vendor": "IBM", "versions": [{"lessThanOrEqual": "11.1.1112.0", "status": "affected", "version": "11.1.1110.0", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:hardware_management_console:*:*:*:*:*:*:*:*", "matchCriteriaId": "F83F44A9-8EC8-4452-8221-E1BC6D77115C", "versionEndExcluding": "10.3.1064.1", "versionStartIncluding": "10.3.1050.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:*:*:*:*:*:*:*:*", "matchCriteriaId": "D73B31D4-CC1E-4360-9E89-B3DF848C9F50", "versionEndExcluding": "11.1.1112.1", "versionStartIncluding": "11.1.1110.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input."}], "id": "CVE-2026-12943", "lastModified": "2026-08-10T20:05:31.010", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-12943", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-07-30T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-07-30T19:17:05.453", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7278667"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[10.3.1050.0,10.3.1064.0]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "HMC V10.3.1050.0", "source": "cna", "vendor": "IBM"}, "product": "hmc_v10310500", "vendor": "ibm"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[11.1.1110.0,11.1.1112.0]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "HMC V11.1.1110.0", "source": "cna", "vendor": "IBM"}, "product": "hmc_v11111100", "vendor": "ibm"}], "created": "2026-07-30T21:30:17.733556+00:00", "title": "Unrestricted Command Execution via Improper Input Validation in IBM Power HMC", "updated": "2026-08-03T10:45:03.617136+00:00", "vendors": ["ibm", "ibm$PRODUCT$hmc_v10310500", "ibm$PRODUCT$hmc_v11111100"]}