{"affected":[{"product":"Controller Disclosure Management","source":"CNA: ibm","vendor":"IBM","versions":[{"status":"affected","version":"1.0.0.0"}]}],"cveId":"CVE-2026-12735","cwes":["CWE-212"],"description":"IBM Controller Disclosure Management 1.0.0.0 could allow an attacker to obtain sensitive EXIF metadata from uploaded images due to improper removal of sensitive information before storage.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":4.3,"severity":"medium","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}],"modifiedAt":1794157979776,"publishedAt":1794157979776,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7294527"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"IBM strongly recommends addressing the vulnerability now by upgrading.\n\nAffected Product(s)VersionFixIBM Controller Disclosure Management1.0.0.0 IBM Controller Disclosure Management® 1.0.1.0 available for download https://www.ibm.com/support/pages/node/7290076"},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7294527"}],"revision":"50569ef78b61f4e9515a423a22122d8e3d848911e9c3e9dbc69e9915bcd70d84","sources":[{"modifiedAt":1794157979776,"name":"CNA: ibm","retrievedAt":1794161318841,"url":"https://www.cve.org/CVERecord?id=CVE-2026-12735"}],"ssvc":null,"status":"published","title":"IBM Controller Disclosure Management has addressed vulnerabilities","updatedAt":1794161318841}