{"affected":[{"product":"Storage Copy Data Management","source":"CNA: ibm","vendor":"IBM","versions":[{"status":"affected","version":"2.2"}]}],"cveId":"CVE-2026-119670","cwes":["CWE-78"],"description":"IBM Storage Copy Data Management 2.2 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.3,"severity":"medium","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},{"score":6.3,"severity":"medium","source":"NVD: psirt@us.ibm.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"}],"modifiedAt":1794158197543,"publishedAt":1794157722028,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7295286"},{"source":"psirt@us.ibm.com","tags":[],"url":"https://www.ibm.com/support/pages/node/7295286"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"Affected Versions Fixing LevelPlatformLink to Fix and Instructions2.2.0.0 - 2.3.1.02.3.2.0Linux \n\n\n https://www.ibm.com/support/pages/node/7288658"},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7295286"}],"revision":"c771e694aecb8ac9f88a85646fa934eb7752d0c4c4f2359a0a9f82b3541029d0","sources":[{"modifiedAt":1794157722028,"name":"CNA: ibm","retrievedAt":1794161315512,"url":"https://www.cve.org/CVERecord?id=CVE-2026-119670"},{"modifiedAt":1794158197543,"name":"NVD","retrievedAt":1794161787761,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119670"}],"ssvc":null,"status":"published","title":"Vulnerabilities in spring-context, logback-core and Another JSON Schema Validator might affect IBM Storage Defender Copy Data Management","updatedAt":1794161787761}