Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-12085 EUVD-2026-40391GHSA-6qv6-3qwf-mmv5

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptable to an Insertion of Sensitive Information Into Sent Data vulnerability

Published Jun 30, 2026 · Updated Jul 1, 2026 · Assigned by ibm

Vendor: IBM Product: UCD - IBM DevOps Deploy Product: UCD - IBM UrbanCode Deploy

Description

IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.

Affected products

VendorProductAffectedFixed
IBM UCD - IBM UrbanCode Deploy 7.3.0 – ≤ 7.3.2.18 —
IBM UCD - IBM DevOps Deploy 8.0 – ≤ 8.0.1.13, 8.1.0 – ≤ 8.1.2.6, 8.2.0 – ≤ 8.2.1.0 —

References