Medium · 5.3 CVE-2026-12762 EUVD-2026-53434GHSA-pxfx-pc9f-jppf

Insertion of Sensitive Information into Externally-Accessible File in IBM Business Automation Insights

Published Aug 5, 2026 · Updated Aug 5, 2026 · Assigned by ibm

Vendor: IBM Product: Cloud Pak for Business Automation

Description

IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.

Affected products

Vendor	Product	Affected	Fixed
IBM	Cloud Pak For Business Automation	24.0.0, 24.0.1, 25.0.0, 26.0.0	—

References

https://www.ibm.com/support/pages/node/7282605 vendor-advisory patch