CVE-2026-19178Medium· 6.8▾ SunlitIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 37.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.
storage_ts4500_library >= 1.1.1.6 <= 1.12.0.3For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central http://www-933.ibm.com/support/fixcentral/ http://www-933.ibm.com/support/fixcentral/ .
All future releases will include the fix for this vulnerability.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-36252Medium· 6.3TS4500 Tape Library Insufficient Session Expiration
CVE-2025-36069Medium· 5.5TS4500 Tape Library Insufficient Session Expiration
CVE-2025-36061Medium· 6.5TS4500 Tape Library Denial of Service
CVE-2026-8355NoneIBM ContextForge MCP Gateway is affected by server-side request forgery
CVE-2026-109126High· 8.8IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials
CVE-2026-107400High· 8.8Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication