CVE-2026-12085

—

CVSS 3.1

6.5 medium

EPSS

<1%p31

Published

Jun 30, 2026 (Jun 30, 2026)

Modified

Jul 2, 2026

Description

IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.

Vendors: ibm
Products: devops deploy, urbancode deploy
Weakness: CWE-201
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.