9.8

CVE-2026-12118

EPSS 0.5%
Veröffentlicht 30.07.2026 17:00:50
Zuletzt bearbeitet 10.08.2026 20:09:48
Erkennungen
Login

IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data

IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Webmethods Integration Version 10.11

Ibm ≫ Webmethods Integration Version 10.15

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.5%	0.4

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
IBM	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

https://www.ibm.com/support/pages/node/7278857

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-12118

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-12118

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-12118

EUVD