BMC
CVE-2026-10537: A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain s
CVE-2026-10537 Oct 27, 2026 Source: Vendor
A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability.
This vulnerability affects :
* Control-M/Enterprise Manager versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions.
* Control-M/Server versions 9.0.20 to 9.0.22 (excluded) and potentially earli
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://nvd.nist.gov/vuln/detail/CVE-2026-10537
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2026-10537
BR2026-0000-034363
unclaimed
Credited as Jean-Romain Garnier from [Airbus Security Lab](https://airbus-seclab.github.io)
CVE-2026-10537
BR2026-0000-034364
unclaimed
Credited as Quentin Liddell from [Airbus Security Lab](https://airbus-seclab.github.io)