What’s Vulnerable › Products

BMC Control-M/Enterprise Manager vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your BMC Control-M/Enterprise Manager version is affected

Latest BMC Control-M/Enterprise Manager vulnerabilities

• CVE-2026-10537 — Remote unauthenticated information disclosure and denial of service due to unauthenticated service access (CVSS 5.3)
• CVE-2026-10540 — Weak password hash protection in Control-M/Entreprise Manager (CVSS 5.6)
• CVE-2026-10538 — Improper deserialization handling in Control-M Components (CVSS 8.0)