Skip to content
OpenAdvisories

Product · BMC

Control-M/Server

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2026-10539

    Unauthenticated command injection in Control-M/Server communication command

    A Control-M/Server communication command does not sufficiently filter or sanitize user-supplied input. Under certain conditions, this issue may allow an unauthenticated attacker to execute unauthorized commands on the affected server, potentially leading to c…

    BMC Control-M/Server