CVE-2026-5935 — TSSC/IMC is vulnerable to OS Command Injection

CVE-2026-5935

TSSC/IMC is vulnerable to OS Command Injection PUBLISHED

Description (CNA)

IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.

Affected (CNA)

Vendor / product	Versions
IBM / Total Storage Service Console (TSSC) / TS4500 IMC	affected 9.2.0 through 9.6.0

CWE

CWE-78

References

https://www.ibm.com/support/pages/node/7270127

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.