Read the docs
TI-2026-10819 Aliases CVE-2026-12628GHSA-5vh7-hcv2-h9gx

Hardcoded credential in the IBM Storage Protect Snapshot For Windows leads to unauthorized access to system

Priority MEDIUM 48CWE-798Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-798.

Summary

IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8.1.0.0 through 8.2.1.0 could allow a remote attacker to bypass authentication due to the use of a hardcoded credential in the FlashCopy Manager (FCM) authentication mechanism. The application contains a static credential embedded in multiple authentication code paths, and does not properly validate authentication responses, which may allow an unauthenticated attacker to establish a trusted session and access protected services. This vulnerability affects client components across multiple versions and may allow an attacker to impersonate legitimate clients, potentially leading to unauthorized access to system resources.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00631 50th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IBMStorage Protect Client8.1.0.0 – 8.2.1.0—No fix listedCNA
IBMStorage Protect Snapshot For Windows8.1.0.0 – 8.2.1.0—No fix listedCNA
  • Storage Protect Client VendorIBM Affected 8.1.0.0 – 8.2.1.0 Fixed in — No fix listed CNA
  • Storage Protect Snapshot For Windows VendorIBM Affected 8.1.0.0 – 8.2.1.0 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:ibm:storage_protect:*:*:*:*:*:*:*:*8.1.0.0 to before 8.2.1.1VulnerableIBM
  • cpe:2.3:a:ibm:storage_protect:*:*:*:*:*:*:*:* Versions 8.1.0.0 to before 8.2.1.1 Vulnerable ·IBM

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-12628
  2. 2026-10-03 Alias added: GHSA-5vh7-hcv2-h9gx
  3. 2026-10-27 EPSS moved to the 50th–90th percentile

References

Patch 1

  • TI-2026-11400 IBM Storage Protect Client is vulnerable to Heap-Based Buffer Overflow CVSS 3.1CRITICAL 9.8
  • TI-2023-17965 IBM Spectrum Protect code execution CVSS 3.1HIGH 8.4
  • TI-2024-25594 IBM Storage Protect for Virtual Environments: Data Protection for VMware information disclosure CVSS 3.1HIGH 7.5
  • TI-2023-21193 IBM Storage Protect information disclosure CVSS 3.1MEDIUM 4.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences