Hardcoded Credentials in IBM Controller 11.0.111.1.2
CVE-2026-5065 Published on May 27, 2026
IBM Controller is affected by vulnerabilities
IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Vulnerability Analysis
CVE-2026-5065 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
Use of Hard-coded Credentials
The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Products Associated with CVE-2026-5065
Want to know whenever a new CVE is published for IBM Controller? stack.watch will email you.
Affected Versions
IBM Controller:- Version 11.0.1, <= 26.0.0.5 is affected.
- Version 11.1.0 is affected.
- Version 11.1.1 is affected.
- Version 11.1.2 is affected.