{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2026-12943",
        "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "state": "PUBLISHED",
        "assignerShortName": "ibm",
        "dateReserved": "2026-06-22T19:55:16.119Z",
        "datePublished": "2026-07-30T17:57:46.718Z",
        "dateUpdated": "2026-07-31T03:56:18.697Z"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
                "shortName": "ibm",
                "dateUpdated": "2026-07-30T17:57:46.718Z"
            },
            "title": "This Power Hardware Management Console update is being released to address",
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "lang": "en",
                            "cweId": "CWE-78",
                            "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
                            "type": "CWE"
                        }
                    ]
                }
            ],
            "affected": [
                {
                    "vendor": "IBM",
                    "product": "HMC V10.3.1050.0",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "10.3.1050.0",
                            "lessThanOrEqual": "10.3.1064.0",
                            "versionType": "semver"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:ibm:hmc_v10310500:10.3.1050.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:hmc_v10310500:10.3.1064.0:*:*:*:*:*:*:*"
                    ]
                },
                {
                    "vendor": "IBM",
                    "product": "HMC V11.1.1110.0",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "11.1.1110.0",
                            "lessThanOrEqual": "11.1.1112.0",
                            "versionType": "semver"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:ibm:hmc_v11111100:11.1.1110.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:hmc_v11111100:11.1.1112.0:*:*:*:*:*:*:*"
                    ]
                }
            ],
            "descriptions": [
                {
                    "lang": "en",
                    "value": "IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<p>IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.</p>"
                        }
                    ]
                }
            ],
            "references": [
                {
                    "url": "https://www.ibm.com/support/pages/node/7278667",
                    "tags": [
                        "vendor-advisory",
                        "patch"
                    ]
                }
            ],
            "metrics": [
                {
                    "format": "CVSS",
                    "scenarios": [
                        {
                            "lang": "en",
                            "value": "GENERAL"
                        }
                    ],
                    "cvssV3_1": {
                        "version": "3.1",
                        "attackVector": "NETWORK",
                        "attackComplexity": "LOW",
                        "privilegesRequired": "NONE",
                        "userInteraction": "NONE",
                        "scope": "UNCHANGED",
                        "confidentialityImpact": "HIGH",
                        "integrityImpact": "HIGH",
                        "availabilityImpact": "HIGH",
                        "baseSeverity": "CRITICAL",
                        "baseScore": 9.8,
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                    }
                }
            ],
            "solutions": [
                {
                    "lang": "en",
                    "value": "IBM strongly recommends addressing the vulnerability now. The following fixes are available on IBM Fix Central at:\n\n\n\nV10R3\n\n\n\n https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~9100HMCppc&release=V10R3&platform=All \n\n\n\n https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~vHMC&release=V10R3&platform=All \n\n\n\nV11R1\n\n\n\n https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~9100HMCppc&release=V11R1&platform=All \n\n\n\n https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&product=ibm~hmc~vHMC&release=V11R1&platform=All \n\n\n\n\n\n\n\n\n\nProduct\n\nAffected Version(s)\n\nVRMF\n\nAPAR\n\nRemediation/Fix\n\nPower HMC\n\nV10.3.1050.0 - V10.3.1064.0\n\nV10.3.1064.1 x86\n\n\n\nMB04527\n\n\n\nMF71762\n\nPower HMC\n\nV10.3.1050.0 - V10.3.1064.0\n\nV10.3.1064.1 ppc\n\n\n\nMB04528\n\n\n\nMF71763\n\nPower HMC\n\nV11.1.1110.0 - V11.1.1112.0\n\nV11.1.1112.1 x86\n\n\n\nMB04529\n\n\n\nMF71764 \n\n\n\n\n\nPower HMC\n\nV11.1.1110.0 - V11.1.1112.0\n\nV11.1.1112.1 ppc\n\nMB04530\n\nMF71765",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<div><p>IBM strongly recommends addressing the vulnerability now. The following fixes are available on IBM Fix Central at:</p><p>V10R3</p><p><a href=\"https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~9100HMCppc&amp;release=V10R3&amp;platform=All\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~9100HMCppc&amp;release=V10R3&amp;platform=All</a></p><p><a href=\"https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~vHMC&amp;release=V10R3&amp;platform=All\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~vHMC&amp;release=V10R3&amp;platform=All</a></p><p>V11R1</p><p><a href=\"https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~9100HMCppc&amp;release=V11R1&amp;platform=All\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~9100HMCppc&amp;release=V11R1&amp;platform=All</a></p><p><a href=\"https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~vHMC&amp;release=V11R1&amp;platform=All\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/main/selectFixes?parent=powersysmgmntcouncil&amp;product=ibm~hmc~vHMC&amp;release=V11R1&amp;platform=All</a></p><p></p><p></p><div><table><tbody><tr><td><div>Product</div></td><td><div>Affected Version(s)</div></td><td><div>VRMF</div></td><td><div>APAR</div></td><td><div>Remediation/Fix</div></td></tr><tr><td><div>Power HMC</div></td><td><div>V10.3.1050.0 - V10.3.1064.0</div></td><td><div>V10.3.1064.1 x86</div></td><td><p>MB04527</p></td><td><p>MF71762</p></td></tr><tr><td><div>Power HMC</div></td><td><div>V10.3.1050.0 - V10.3.1064.0</div></td><td><div>V10.3.1064.1 ppc</div></td><td><p>MB04528</p></td><td><p>MF71763</p></td></tr><tr><td><div>Power HMC</div></td><td><div>V11.1.1110.0 - V11.1.1112.0</div></td><td><div>V11.1.1112.1 x86</div></td><td><p>MB04529</p></td><td><div><div><p>MF71764 </p></div></div></td></tr><tr><td><div>Power HMC</div></td><td><div>V11.1.1110.0 - V11.1.1112.0</div></td><td><div>V11.1.1112.1 ppc</div></td><td>MB04530</td><td><div><div><p>MF71765 </p></div></div></td></tr></tbody></table></div></div><div></div><p></p>"
                        }
                    ]
                }
            ]
        },
        "adp": [
            {
                "metrics": [
                    {
                        "other": {
                            "type": "ssvc",
                            "content": {
                                "timestamp": "2026-07-30T00:00:00+00:00",
                                "options": [
                                    {
                                        "Exploitation": "none"
                                    },
                                    {
                                        "Automatable": "yes"
                                    },
                                    {
                                        "Technical Impact": "total"
                                    }
                                ],
                                "role": "CISA Coordinator",
                                "version": "2.0.3",
                                "id": "CVE-2026-12943"
                            }
                        }
                    }
                ],
                "title": "CISA ADP Vulnrichment",
                "providerMetadata": {
                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "shortName": "CISA-ADP",
                    "dateUpdated": "2026-07-31T03:56:18.697Z"
                }
            }
        ]
    }
}