CVE-2026-12759 — Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

Back Back to CVE browser

MEDIUM

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

Published Sep 14, 2026

6.5

MEDIUM

CVSS 3.1

EPSS 0.22%

Description

IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption.

Affected products

Vendor IBM Product Cloud Pak for Business Automation Default
n/a
- Version
  24.0.0
  Status
  affected
  Constraints
  <=24.0.0 Interim Fix 009
- Version
  24.0.1
  Status
  affected
  Constraints
  <=24.0.1 Interim Fix 008
- Version
  25.0.0
  Status
  affected
  Constraints
  <=25.0.0 Interim Fix 005
- Version
  26.0.0
  Status
  affected
  Constraints
  <=26.0.0 Interim Fix 001

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Cloud Pak for Business Automation

n/a

Version	Status	Constraints
24.0.0	affected	<=24.0.0 Interim Fix 009
24.0.1	affected	<=24.0.1 Interim Fix 008
25.0.0	affected	<=25.0.0 Interim Fix 005
26.0.0	affected	<=26.0.0 Interim Fix 001

Remediation

Vendor solution

IBM strongly recommends addressing the vulnerability now.

Affected Product(s)Version(s)Remediation / FixIBM Cloud Pak for Business AutomationV26.0.0 - V26.0.0-IF001Apply security fix 26.0.0-IF002 https://www.ibm.com/support/pages/readme-ibm-cloud-pak-business-automation-2600-if002 IBM Cloud Pak for Business AutomationV25.0.0 - V25.0.0-IF005Apply security fix 25.0.0-IF006 https://www.ibm.com/support/pages/readme-ibm-cloud-pak-business-automation-2500-if006 IBM Cloud Pak for Business AutomationV24.0.1 - V24.0.1-IF008Apply security fix 24.0.1-IF009 https://www.ibm.com/support/pages/readme-ibm-cloud-pak-business-automation-2401-if009 IBM Cloud Pak for Business AutomationV24.0.0 - V24.0.0-IF009Apply security fix 24.0.0-IF010 https://www.ibm.com/support/pages/readme-ibm-cloud-pak-business-automation-2400-if010

Any open source library may be included in one or more sub-components of IBM Cloud Pak for Business Automation. Open source updates are not always synchronized across all components.