CVE-2026-12118

Published: Jul 30, 2026Modified: Aug 10, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: psirt@us.ibm.com

Description

IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data.

Affected (2)

Products: Ibm: Webmethods Integration

Ibm

1 product

Webmethods Integration

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Webmethods Integration	Version 10.11
Ibm Webmethods Integration	Version 10.15

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (1)

https://www.ibm.com/support/pages/node/7278857

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.