CVE-2026-12762
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
IBM Cloud Pak For Business Automation versions 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.
Risk Assessment
Exposure of sensitive information could aid attackers in further attacks, compromising data confidentiality.
Recommendation
Restrict access to manifest files and apply available vendor patches or mitigations.
Other vulnerabilities in IBM Cloud Pak For Business Automation
See all- CVE-2026-12759Medium
IBM Cloud Pak for Business Automation allows an authenticated user to cause a denial of service due to uncontrolled resource consumption.
- CVE-2026-12758Medium
IBM Cloud Pak for Business Automation allows a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.
Original NVD description (English source)
IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.