CVE-2026-13460
Awaiting Analysis Awaiting Analysis - Queue

Hard-Coded Token in IBM Storage Scale GUI

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: IBM Corporation

Description
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-14
AI Q&A
2026-08-14
EPSS Evaluated
N/A
NVD
CVE-2026-13460
EUVD
EUVD-2026-58361

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ibm storage_scale From 5.2.3.0 (inc) to 5.2.3.8 (inc)
ibm storage_scale From 6.0.0.0 (inc) to 6.0.1.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-13460 is a vulnerability in IBM Storage Scale GUI where a hardcoded token exists in the source code. This token was used for inter-node cluster communication and REST API authentication between GUI components.

Detection Guidance

To detect this vulnerability, check the IBM Storage Scale GUI source code for hardcoded tokens used in inter-node communication or REST API authentication. Review version numbers of IBM Storage Scale (5.2.3.0-5.2.3.8 or 6.0.0.0-6.0.1.0) to confirm exposure. No specific commands are provided in the resources.

Impact Analysis

An attacker could exploit the hardcoded token to gain unauthorized access to cluster communication or REST API functions, potentially leading to data breaches or unauthorized system control.

Compliance Impact

This vulnerability could violate compliance requirements that mandate secure authentication and protection of sensitive data, such as GDPR or HIPAA, due to the risk of unauthorized access.

Mitigation Strategies

Upgrade IBM Storage Scale to version 5.2.3.9 or higher (5.2.3.x branch) or 6.0.1.1 or higher (6.0.0.x branch) immediately. No workarounds are available per IBM's advisory.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-13460. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart