CVE-2026-12118

CriticalCVSS 9.8

Published: 30/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

40th percentile - higher than 40% of all known CVEs

Summary

IBM webMethods Integration (on prem) versions 10.15 and 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to deserialization of untrusted data.

Risk Assessment

An attacker can remotely execute arbitrary code on the integration server, potentially leading to full system and data compromise.

Recommendation

Apply the patch or update provided by IBM for webMethods Integration.

Original NVD description (English source)

IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data.