CVE-2026-10540 | BMC Control-M/Enterprise Manager up to 9.0.20 Password Recovery Page weak hash

A vulnerability labeled as problematic has been found in BMC Control-M and Enterprise Manager up to 9.0.20. Affected is an unknown function of the component Password Recovery Page. The manipulation results in use of weak hash.

This vulnerability is reported as CVE-2026-10540. The attack requires a local approach. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More