← CVE Intelligence

CVE-2026-12084

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains PUBLISHED

Description (CNA)

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.

Affected (CNA)

Vendor / productVersions
IBM / UCD - IBM DevOps Deployaffected 8.1.0 through 8.1.2.6; affected 8.2.0 through 8.2.1.0

CWE

CWE-942

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.