CVE-2026-12118

CRITICAL CVSS 9.8 View on NVD ↗

Description

IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://www.ibm.com/support/pages/node/7278857

Published: Jul 30, 2026 19:17 UTC Modified: Jul 30, 2026 19:31 UTC