CVE-2026-14375: falha de média gravidade em IBM Storage Scale
The following vulnerabilities that can affect IBM Storage Scale Install Toolkit are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
10Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.1.0 does not validate or improperly validates TLS certificate validation when communicating with remote cluster GUI interfaces, which could allow an attacker to inject forged JSON responses using man in the middle techniques.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
IBM · Storage ScaleCVEs relacionadas — IBM Storage Scale
No mesmo produto, das mais perigosas para as menos.
CVE-2026-13460HIGHThe following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higherEPSS 0.5%CVE-2025-1137HIGHIBM Storage Scale command injectionEPSS 0.4%CVE-2023-38002MEDIUMIBM Storage Scale session fixationEPSS 0.4%CVE-2024-31892HIGHIBM Storage Scale SQL injectionEPSS 0.3%CVE-2025-36104MEDIUMIBM Storage Scale information disclosureEPSS 0.3%CVE-2026-19483HIGHThe following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higherEPSS 0.2%