IBM STORAGE COPY DATA MANAGEMENT · CVE-2026-119670 · Vendor
NO FIX YET
IBM Storage Copy Data Management 2.2 does not properly validate user-supplied input. An authenticated user can use this to execute arbitrary commands with normal user privileges on the system.
first public Nov 8, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organisations running IBM Storage Copy Data Management 2.2. An attacker needs a valid user account on the product. The sources do not describe the configuration or feature that makes an install exposed, so the exact exposure is unknown.
Not affected if other-versions
Who cares ibm-storage-copy-data-management, self-hosted
Unknown from the sources.
No fix yet, per the sources.
IBM Storage Copy Data Management 2.2 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.