CVE-2026-10539

Name of the Vulnerable Software and Affected Versions Control-M/Server versions 9.0.20.x through 9.0.21.200

Description A communication command fails to sufficiently filter or sanitize user-supplied input. This flaw allows an unauthenticated attacker to execute unauthorized commands on the server, which could lead to a full system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.