Description
IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
Published: 2026-07-30
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

IBM Power Hardware Management Console (HMC) versions V10.3.1050.0 through V10.3.1064.0 and V11.1.1110.0 through V11.1.1112.0 contain an improper input validation flaw that allows an unauthenticated user to inject and execute arbitrary system commands with elevated privileges. The flaw is a classic command injection (CWE‑78) that can give attackers full control over the Power system, compromising confidentiality, integrity, and availability.

Affected Systems

Affected products are IBM HMC running on both x86 and ppc architectures. Specific vulnerable releases include V10.3.1050.0 to V10.3.1064.0 with the patch level V10.3.1064.1, and V11.1.1110.0 to V11.1.1112.0 with the patch level V11.1.1112.1. Both console and Novalink management environments are impacted.

Risk and Exploitability

The vulnerability carries a CVSS score of 9.8, indicating critical severity. EPSS shows less than 1%, yet the flaw provides unauthenticated network-based command execution, making it highly exploitable if the HMC interface is exposed. The issue is not listed in the CISA KEV catalog, but the potential impact warrants immediate patching. Attackers can reach the vulnerable interface over the network without, specifying command parameters that are executed with system privileges.

Generated by OpenCVE AI on August 3, 2026 at 10:36 UTC.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now. The following fixes are available on IBM Fix Central at: V10R3 https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~9100HMCppc&release=V10R3&platform=All https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~vHMC&release=V10R3&platform=All V11R1 https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~9100HMCppc&release=V11R1&platform=All https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~vHMC&release=V11R1&platform=All Product Affected Version(s) VRMF APAR Remediation/Fix Power HMC V10.3.1050.0 - V10.3.1064.0 V10.3.1064.1 x86 MB04527 MF71762 Power HMC V10.3.1050.0 - V10.3.1064.0 V10.3.1064.1 ppc MB04528 MF71763 Power HMC V11.1.1110.0 - V11.1.1112.0 V11.1.1112.1 x86 MB04529 MF71764  Power HMC V11.1.1110.0 - V11.1.1112.0 V11.1.1112.1 ppc MB04530 MF71765

OpenCVE Recommended Actions

  • Apply the IBM Fix Central update for your HMC version (V10.3.1064.1 for V10.3.x or V11.1.1112.1 for V11.x) to patch the command injection flaw.
  • After applying the patch, reboot the HMC to ensure the new code takes effect.
  • Limit management interface access by configuring firewalls or network segmentation so that only trusted hosts can reach the HMC console, reducing the attack surface.

Generated by OpenCVE AI on August 3, 2026 at 10:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 30 Jul 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 30 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Description IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
Title This Power Hardware Management Console update is being released to address
First Time appeared Ibm
Ibm hmc V10310500
Ibm hmc V11111100
Weaknesses CWE-78
CPEs cpe:2.3:a:ibm:hmc_v10310500:10.3.1050.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:hmc_v10310500:10.3.1064.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:hmc_v11111100:11.1.1110.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:hmc_v11111100:11.1.1112.0:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm hmc V10310500
Ibm hmc V11111100
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Ibm Hardware Management Console Hmc V10310500 Hmc V11111100
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-07-31T03:56:18.697Z

Reserved: 2026-06-22T19:55:16.119Z

Link: CVE-2026-12943

cve-icon Vulnrichment

Updated: 2026-07-30T18:39:31.353Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-30T19:17:05.453

Modified: 2026-08-10T20:05:31.010

Link: CVE-2026-12943

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T10:45:03Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')