PT-2026-34585 · Ibm · Ts4500 Imc+1

Published 2026-04-22 · Updated 2026-04-23 · CVE-2026-5935

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Total Storage Service Console (TSSC) / TS4500 IMC versions 9.2 through 9.6

Description Improper validation of user supplied input could allow an unauthenticated user to execute arbitrary commands with normal user privileges on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-5935

Affected Products

Ts4500 Imc

Total Storage Service Console

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-5935 · Security Note
• https://ibm.com/support/pages/node/7270127 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/2047359923697111138 · Twitter Post