CVE-2026-12758 — Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

CVE-2026-12758

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. PUBLISHED

Description (CNA)

IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.

Affected (CNA)

Vendor / product	Versions
IBM / Cloud Pak for Business Automation	affected 26.0.0 through 26.0.0 Interim Fix 001; affected 25.0.0 through 25.0.0 Interim Fix 005; affected 24.0.1 through 24.0.1 Interim Fix 008; affected 24.0.0 through 24.0.0 Interim Fix 009

CWE

CWE-862

References

https://www.ibm.com/support/pages/node/7285931

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.