Paper/Archive/CVE-2026-12118

CVE-2026-12118

IBM webMethods Integration (on prem) — IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data

EPSS 0.8%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 58.1.581 × 2011.6 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data.

Affected

ProductAffectedFixed inSource

webMethods Integration (on prem)10.15, 10.11–CNA

Scores by source

ibm (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

patchibm.com/support/pages/node/7278857