Control-M/Server vulnerabilities

CVEs whose affected-version data names the Control-M/Server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-10537Medium· 5.3

yesterday

Remote unauthenticated information disclosure and denial of service due to unauthenticated service access

A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure …

▾ SunlitBMC · Control-M/Enterprise Managervia CVEORG