{"id":"CVE-2026-10537","published":"2026-10-27T14:16:33.000","lastModified":"2026-10-27T16:03:45.247","description":"A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability.\n\n\n\n\nThis vulnerability affects :\n\n  *  Control-M/Enterprise Manager versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions.\n  *  Control-M/Server versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions","cvssScore":5.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwes":["CWE-305"],"vendors":[],"products":[],"references":[{"url":"https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA3cx000000KMUDCA4&type=Solution","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}