Medium · 5.4 CVE-2026-12742 EUVD-2026-78870GHSA-4qhm-cjfg-jjv8

Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

Published Sep 15, 2026 · Updated Sep 15, 2026 · Assigned by ibm

Vendor: IBM Product: Business Automation Workflow containers and traditional

Description

IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls.

Affected products

Vendor	Product	Affected	Fixed
IBM	Business Automation Workflow containers and traditional	26.0.0 – ≤ 26.0.0 Interim Fix 001, 25.0.0 – ≤ 25.0.0 Interim Fix 005, 24.0.1 – ≤ 24.0.1 Interim Fix 008, 24.0.0 – ≤ 24.0.0 Interim Fix 009	—

References

https://www.ibm.com/support/pages/node/7285930 vendor-advisory patch