High · 7.1 CVE-2026-13107 EUVD-2026-78082GHSA-jw8h-7ccv-vq64

Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

Published Sep 14, 2026 · Updated Sep 15, 2026 · Assigned by ibm

Vendor: IBM Product: Business Automation Workflow containers and traditional

Description

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default.

Affected products

Vendor	Product	Affected	Fixed
IBM	Business Automation Workflow containers and traditional	26.0.0 – ≤ 26.0.0 Interim Fix 001, 25.0.0 – ≤ 25.0.0 Interim Fix 005, 24.0.1 – ≤ 24.0.1 Interim Fix 008, 24.0.0 – ≤ 24.0.0 Interim Fix 009	—

References

https://www.ibm.com/support/pages/node/7285930 vendor-advisory patch