Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-10537

Remote unauthenticated information disclosure and denial of service due to unauthenticated service access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
airbus

Description

A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability. This vulnerability affects : * Control-M/Enterprise Manager versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions. * Control-M/Server versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BMC Control-M/Enterprise Manager

Default version status: affected

  • 9.0.22unaffected
  • 9.0.20 to < 9.0.22affected

BMC Control-M/Server

Default version status: affected

  • 9.0.22unaffected
  • 9.0.20 to < 9.0.22affected

References