CVE-2026-12758
MediumCVSS 5.4Summary
IBM Cloud Pak for Business Automation allows a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.
Risk Assessment
An attacker may gain access to administrative functions or sensitive data without proper permissions.
Recommendation
Install security updates from IBM and ensure proper validation of HTTP headers.
Other vulnerabilities in IBM Cloud Pak for Business Automation
See all- CVE-2026-12759Medium
IBM Cloud Pak for Business Automation allows an authenticated user to cause a denial of service due to uncontrolled resource consumption.
- CVE-2026-12762Medium
IBM Cloud Pak For Business Automation versions 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.
Original NVD description (English source)
IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.