CVE-2026-12742

—

CVSS 3.1

5.4 medium

EPSS

—

Published

Sep 15, 2026 (9h ago)

Modified

Sep 15, 2026

Description

IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls.

Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (—)

In the news0 stories

No ingested article mentions this CVE yet.