Bmc - Control-m/server - CRITICAL - CVE-2026-10539. A security flaw exists in Control-M/Server due to insufficient filtering and sanitization of user-supplied input in communication commands. This vulnerability can enable attackers without authentication to execute unauthorized commands, which poses a risk of server compromise. Affected versions include Control-M/Server 9.0.20.x to 9.0.21.200, along with potential earlier unsupported versions.