HarborGuard / CVE
Back to search
HIGHCVE-2026-23782Published Modified CNA mitre

CVE-2026-23782: An issue was discovered in BMC Control-M/MFT 9

An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. An API management endpoint allows unauthenticated users to obtain both an API identifier and its corresponding secret value. With these exposed secrets, an attacker could invoke privileged API operations, potentially leading to unauthorized access.

Metrics

CVSS v3.1
7.5
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • n/a / n/a
    n/a
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
CVE-2026-23782: An issue was discovered in BMC Control-M/MFT 9 | HarborGuard CVE