CVE-2026-56413

Name of the Vulnerable Software and Affected Versions Storage Concentrator (SC & SCVM) (affected versions not specified)

Description Command injection exists in the ms service.pl service, which listens on TCP port 9000 by default and accepts custom network packets to perform device actions. An unauthenticated remote attacker can send a specially crafted packet containing a malicious payload that is processed without adequate sanitization, allowing for arbitrary command execution with root-level privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.