---
id: "CVE-2026-19133"
page: "https://infrastack.ai/live/CVE-2026-19133"
kind: "vulnerability"
aliases: ["CVE-2026-19133"]
title: "IBM TS4500 tape library: a low-privileged user can change another user's password and take over the account"
severity: "high"
cvss: 8.1
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Storage TS4500 Library", "fixed": ["1.12.0.4"], "affected": ">= 1.1.1.6, <= 1.12.0.3", "ecosystem": "vendor"}]
ecosystems: []
tags: ["firmware", "ibm-storage", "infrastructure", "tape-library", "ts4500"]
not_affected_if: ["fixed-firmware", "outside-affected-versions"]
published_at: "2026-11-08T19:17:38+00:00"
first_seen_at: "2026-11-08T19:22:33+00:00"
updated_at: "2026-11-08T19:24:59+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19133", "first_seen_at": "2026-11-08T19:22:33+00:00"}, {"source": "analyst", "url": "https://www.ibm.com/support/pages/node/7292609", "first_seen_at": "2026-11-08T19:24:59+00:00", "cites": ["https://www.ibm.com/support/pages/node/7292609"]}]
exploit_sources: []
---

# IBM TS4500 tape library: a low-privileged user can change another user's password and take over the account

Link for people: https://infrastack.ai/live/CVE-2026-19133 (this .md is for agents)

IBM's bulletin says the TS4500 Web UI and REST interfaces did not enforce authorization on password change requests. A lower-privileged authenticated user could use their own session to change another user's password and gain access to that account. Affects Storage TS4500 Library 1.1.1.6 - 1.12.0.3. IBM lists no workarounds.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Storage TS4500 Library affected >= 1.1.1.6, <= 1.12.0.3 fixed 1.12.0.4

## How to check

Check the TS4500 library firmware version (management GUI or your IBM service contact). Versions 1.1.1.6 through 1.12.0.3 are listed as affected by IBM. Also review who holds management GUI/REST accounts, and look for unexpected password changes on accounts.

## Fix

For the 1.12.0 release, upgrade to firmware 1.12.0.4 Fix Pack or later, from IBM Fix Central. IBM says all future releases include the fix. The bulletin gives no fixed version for other release lines.

## Timeline

- 2026-11-08T19:22:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-19133
- 2026-11-08T19:24:59+00:00 analyst https://www.ibm.com/support/pages/node/7292609 — Read IBM bulletin node/7292609 (published 14 Oct 2026): fix 1.12.0.4 for 1.12.0 line, workarounds none. Not exploited per sources. Bulletin text names 'Diamondback' in CVE description but affected table lists only TS4500.

## Documents

- [advisory] IBM Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2026-19133 https://www.ibm.com/support/pages/node/7292609

## From the sources

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_