Live › vulnerability › CVE-2026-19178
Go to dashboardIBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 contain a race condition. A remote attacker who already has a valid account can gain administrative privileges they should not have.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run an IBM TS4500 tape library with the affected firmware range and that have remote user accounts on its management interface. The sources do not describe a specific configuration that makes the flaw reachable, so exposure is assumed for any account holder on an affected version. Organizations not running TS4500 hardware can skip it.
No product ranges from the sources yet.
1.1.1.6 through 1.12.0.31.12.0.3, as specified in the IBM security bulletinEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.
This page as .md · .json · in your agent: get_signal("CVE-2026-19178")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.