Advisory · CVE-2026-19133
IBM Storage TS4500 Library flaw can hand attackers another account
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization, rated high at CVSS 8.1.
- Vendor
- IBM
- Product
- Storage TS4500 Library
- Identifier / CWE
- CVE-2026-19133
CWE-285 - Action timing
- Immediate
Explain it like I’m five
The TS4500 tape library's management console checks who you are, but a flaw in its authorization lets a logged-in attacker take over another account's session and act as them.
- 01Authenticated access
A remote authenticated attacker reaches the TS4500 Library management interface.
- 02Authorization flaw hit
The improper authorization check is circumvented.
- 03Account taken over
Another account is taken over and used.
What happened
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization. The record rates it high at CVSS 8.1 under version 3.1, with network attack vector, low complexity, low privileges required, and no user interaction.
IBM’s bulletin lists the affected versions and the fix. A tape library holds backups, so an account takeover there threatens the data meant to survive everything else.
What to do
- Inventory TS4500 Library deployments and record each version.
- Check the IBM bulletin for the fix and apply it.
- Review management console logs for account takeover indicators.
- Restrict network access to the management interface to trusted sources.
- Verify the deployed version after updating.
Management note
Backup infrastructure is the last line of defense, and an account takeover there is a recovery risk. Patch it before the next backup cycle.