Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A Control-M/Server communication command does not sufficiently filter or sanitize user-supplied input. Under certain conditions, this issue may allow an unauthenticated attacker to execute unauthorized commands on the affected server, potentially leading to compromise of the server. This vulnerability affects Control-M/Server versions 9.0.20.x to 9.0.21.200 (included) and potentially earlier unsupported versions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-01 | 1 | General1 |
| 2026-07-03 | 1 | Disclosure1 |
| 2026-07-31 | 1 | General1 |
Warning: #CVE-2026-10539 (CVSS 9.5) - unauthenticated command injection in #ControlM/Server can lead to full server compromise. More info at: https://nvd.nist.gov/vuln/detail/CVE-2026-10539. #Patch #Patch #Patch
Post summary
The tweet warns about CVE-2026-10539, a high‑severity unauthenticated command injection in Control M/Server that could lead to full server compromise, and references the NVD entry with a general patch notice.
CVE-2026-10539: BMC Control-M/Server Unauthenticated Command Injection - What It Means for Your Business and How to Respond https://hubs.li/Q04rtxtz0
Post summary
The post references CVE-2026-10539 as an unauthenticated command‑injection vulnerability in BMC Control‑M/Server but does not provide proof‑of‑concept, exploit code, evidence of active exploitation, or detailed mitigation information.
CVE-2026-10539 Command Injection Vulnerability in BMC Control-M/Server 9.0.20 Through 9.0.21.200 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10539
Post summary
A command injection vulnerability has been reported in BMC Control‑M/Server 9.0.20 through 9.0.21.200, with limited details and no evidence of public exploits or patches.