CVE-2026-10540 — Weak password hash protection in Control-M/Entreprise Manager
The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtai…
Published: 2026-07-01 · CVSS: 5.6 · CVSS 4.0
The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manager unsupported versions 9.0.20.x and potentially earlier unsupported versions
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7