CVE-2026-12759
MediumCVSS 6.5Summary
IBM Cloud Pak for Business Automation allows an authenticated user to cause a denial of service due to uncontrolled resource consumption.
Risk Assessment
The attack may lead to system overload and service disruption for other users.
Recommendation
Apply patches provided by IBM and monitor resource usage to detect anomalies.
Other vulnerabilities in IBM Cloud Pak for Business Automation
See all- CVE-2026-12758Medium
IBM Cloud Pak for Business Automation allows a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.
- CVE-2026-12762Medium
IBM Cloud Pak For Business Automation versions 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.
Original NVD description (English source)
IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption.