{"affected":[{"product":"Storage TS4500 Library","source":"CNA: ibm","vendor":"IBM","versions":[{"lessThanOrEqual":"1.12.0.3","status":"affected","version":"1.1.1.6","versionType":"semver"}]}],"cveId":"CVE-2026-19133","cwes":["CWE-285"],"description":"IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.1,"severity":"high","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"}],"modifiedAt":1794162483804,"publishedAt":1794162483804,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7292609"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central  http://www-933.ibm.com/support/fixcentral/ http://www-933.ibm.com/support/fixcentral/ . \n\n\n\nAll future releases will include the fix for this vulnerability."},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7292609"}],"revision":"91cf738d886e9aab49ec830048848d64b0c0ea53e55292e83f7acc15b2478f1b","sources":[{"modifiedAt":1794162483804,"name":"CNA: ibm","retrievedAt":1794164927162,"url":"https://www.cve.org/CVERecord?id=CVE-2026-19133"}],"ssvc":null,"status":"published","title":"TS4500 Tape Library addresses security vulnerability","updatedAt":1794164927162}