Skip to content
OpenAdvisories
High · 8.1 CVE-2026-118904 EUVD-2026-119748GHSA-rx5h-4548-3rqv

IBM webMethods Integration Server is affected by vulnerabilty in backup code validation during 2FA Authentication.

Published Nov 8, 2026 · Updated Nov 12, 2026 · Assigned by ibm

Vendor: IBM Product: webMethods Integration Server

Description

IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.

Affected products

VendorProductAffectedFixed
IBM webMethods Integration Server 12.1 —

References