Live › vulnerability › CVE-2026-10537
Go to dashboardControl-M/Enterprise Manager and Control-M/Server contain a misconfiguration that lets unauthenticated remote users access certain service functions. The exposure could leak information or disrupt service availability.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams running Control-M/Enterprise Manager or Control-M/Server in the affected version range, especially those with network reach from untrusted networks to the affected service. Sources do not say which specific configuration triggers the issue, so exposure beyond the version range is unknown.
No product ranges from the sources yet.
9.0.20 up to but not including 9.0.22, plus earlier unsupported versions9.0.22 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability.
This vulnerability affects :
This page as .md · .json · in your agent: get_signal("CVE-2026-10537")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.