Skip to content
OpenAdvisories
High · 7.3 CVE-2026-5935 EUVD-2026-25136GHSA-7345-vwm6-q6vg

TSSC/IMC is vulnerable to OS Command Injection

Published Apr 22, 2026 · Updated Apr 23, 2026 · Assigned by ibm

Vendor: IBM Product: Total Storage Service Console (TSSC) / TS4500 IMC

Description

IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.

Affected products

VendorProductAffectedFixed
IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2.0 – ≤ 9.6.0 —

References