Medium · 5.4 CVE-2026-12758 EUVD-2026-78158GHSA-v72p-h53q-g7f7

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

Published Sep 14, 2026 · Updated Sep 15, 2026 · Assigned by ibm

Vendor: IBM Product: Cloud Pak for Business Automation

Description

IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.

Affected products

Vendor	Product	Affected	Fixed
IBM	Cloud Pak for Business Automation	26.0.0 – ≤ 26.0.0 Interim Fix 001, 25.0.0 – ≤ 25.0.0 Interim Fix 005, 24.0.1 – ≤ 24.0.1 Interim Fix 008, 24.0.0 – ≤ 24.0.0 Interim Fix 009	—

References

https://www.ibm.com/support/pages/node/7285931 vendor-advisory patch