Critical Alert 1 Active Exploit Detected Today

CVE-2026-60004 — Gitea Code Injection Vulnerability →
Powered by CVE Watchtower
×
August 26, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-12943NVD

Vulnerability Summary

IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
Severity Level
CRITICAL(9.8)
Published Date
Jul 30, 2026
Last Modified
Aug 10, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
1.01%Probability
Root Weakness (CWE)
CWE-78: OS Command Injection ↗
The software constructs all or part of an OS command using externally-influenced input, but does not properly neutralize special elements.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

External References