CVE-2026-12943 CRITICAL CVSS 9.8 hmc_v11_1_1110_0 Verified Advisory

OS command injection in IBM Power Hardware Management Console (CVE-2026-12943)

Command Injection IBM Hmc V10 3 1050 0 Hmc V11 1 1110 0

IBM Power Hardware Management Console (HMC) contains an OS command injection vulnerability (CWE-78) caused by improper validation of user-supplied input. An unauthenticated remote attacker can exploit this flaw to execute arbitrary commands with elevated privileges on affected systems. Affected versions: - V10.3.1050.0 - V10.3.1064.0 - V11.1.1110.0 - V11.1.1112.0 We recommend updating to: V10.3.1064.1, V11.1.1112.1. CVSS 9.8 · our assessment: act_now Reference: https://www.ibm.com/support/pages/node/7278667 Details: https://vuln.today/cve/CVE-2026-12943

Verified by vuln.today against published advisories.

Affected versions

– V10.3.1050.0 - V10.3.1064.0
– V11.1.1110.0 - V11.1.1112.0

Fixed in: V10.3.1064.1; V11.1.1112.1

Full CVE analysis Reference Published Jul 30, 2026

← All verified advisories