Vulnerability-Lookup

CVE-2026-12730 (GCVE-0-2026-12730)

Vulnerability from cvelistv5 – Published: 2026-08-05 15:57 – Updated: 2026-08-05 17:59

Title

Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers

Summary

IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.

Severity

3.8 (Low)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-05 17:59 UTC

CWE

CWE-297 - Improper Validation of Certificate with Host Mismatch

Assigner

ibm mitre root

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7282596	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version	CPE status
IBM	Business Automation Workflow containers and traditional	Affected: 26.0.0 Affected: 25.0.0 , ≤ 25.0.0 Interim Fix 005 (semver) Affected: 24.0.1 , ≤ 24.0.1 Interim Fix 007 (semver) Affected: 24.0.0 , ≤ 24.0.0 Interim Fix 009 (semver) cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:26.0.0:::::::* cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:::::::* cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:interim_fix_005:::::: cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:::::::* cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:interim_fix_007:::::: cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:::::::* cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:interim_fix_009::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-12730",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-05T17:59:02.663931Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-05T17:59:18.166Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:26.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:interim_fix_005:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:interim_fix_007:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:interim_fix_009:*:*:*:*:*:*"
          ],
          "product": "Business Automation Workflow containers and traditional",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "26.0.0"
            },
            {
              "lessThanOrEqual": "25.0.0 Interim Fix 005",
              "status": "affected",
              "version": "25.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "24.0.1 Interim Fix 007",
              "status": "affected",
              "version": "24.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "24.0.0 Interim Fix 009",
              "status": "affected",
              "version": "24.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.\u003c/p\u003e"
            }
          ],
          "value": "IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-297",
              "description": "CWE-297 Improper Validation of Certificate with Host Mismatch",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T17:25:51.335Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7282596"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading.\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eAffected Product(s)\u003c/th\u003e\u003cth\u003eVersion(s)\u003c/th\u003e\u003cth\u003eRemediation / Fix\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow containers\u003c/td\u003e\u003ctd\u003eV26.0.0\u003c/td\u003e\u003ctd\u003eApply container \u003ca href=\"https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-containers-26000-interim-fixes\" rel=\"nofollow\"\u003e26.0.0-IF001\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow traditional\u003c/td\u003e\u003ctd\u003eV26.0.0\u003c/td\u003e\u003ctd\u003eApply traditional \u003ca href=\"https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-26000-interim-fixes\" rel=\"nofollow\"\u003e26.0.0-IF001\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow containers\u003c/td\u003e\u003ctd\u003eV25.0.0 - V25.0.0-IF005\u003c/td\u003e\u003ctd\u003eApply container \u003ca href=\"https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-containers-25000-interim-fixes\" rel=\"nofollow\"\u003e25.0.0-IF006\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow traditional\u003c/td\u003e\u003ctd\u003eV25.0.0 - V25.0.0-IF005\u003c/td\u003e\u003ctd\u003eApply traditional \u003ca href=\"https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-25000-interim-fixes\" rel=\"nofollow\"\u003e25.0.0-IF006\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow containers\u003c/td\u003e\u003ctd\u003eV24.0.1 - V24.0.1-IF007\u003c/td\u003e\u003ctd\u003eApply container \u003ca href=\"https://www.ibm.com/support/pages/node/7183042\" rel=\"nofollow\"\u003e24.0.1-IF008\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow traditional\u003c/td\u003e\u003ctd\u003eV24.0.1 - V24.0.1-IF007\u003c/td\u003e\u003ctd\u003eApply traditional \u003ca href=\"https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-24010-interim-fixes\" rel=\"nofollow\"\u003e24.0.1-IF008\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow containers\u003c/td\u003e\u003ctd\u003eV24.0.0 - V24.0.0-IF009\u003c/td\u003e\u003ctd\u003eApply container \u003ca href=\"https://www.ibm.com/support/pages/node/7159792\" rel=\"nofollow\"\u003e24.0.0-IF010\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow traditional\u003c/td\u003e\u003ctd\u003eV24.0.0 - V24.0.0-IF009\u003c/td\u003e\u003ctd\u003eApply traditional \u003ca href=\"https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-24000-interim-fixes\" rel=\"nofollow\"\u003e24.0.0-IF010\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now by upgrading.\n\nAffected Product(s)Version(s)Remediation / FixIBM Business Automation Workflow containersV26.0.0Apply container  26.0.0-IF001 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-containers-26000-interim-fixes IBM Business Automation Workflow traditionalV26.0.0Apply traditional  26.0.0-IF001 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-26000-interim-fixes IBM Business Automation Workflow containersV25.0.0 - V25.0.0-IF005Apply container  25.0.0-IF006 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-containers-25000-interim-fixes IBM Business Automation Workflow traditionalV25.0.0 - V25.0.0-IF005Apply traditional  25.0.0-IF006 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-25000-interim-fixes IBM Business Automation Workflow containersV24.0.1 - V24.0.1-IF007Apply container  24.0.1-IF008 https://www.ibm.com/support/pages/node/7183042 IBM Business Automation Workflow traditionalV24.0.1 - V24.0.1-IF007Apply traditional  24.0.1-IF008 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-24010-interim-fixes IBM Business Automation Workflow containersV24.0.0 - V24.0.0-IF009Apply container  24.0.0-IF010 https://www.ibm.com/support/pages/node/7159792 IBM Business Automation Workflow traditionalV24.0.0 - V24.0.0-IF009Apply traditional  24.0.0-IF010 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-24000-interim-fixes"
        }
      ],
      "title": "Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-12730",
    "datePublished": "2026-08-05T15:57:37.007Z",
    "dateReserved": "2026-06-19T15:59:20.718Z",
    "dateUpdated": "2026-08-05T17:59:18.166Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-12730",
      "date": "2026-08-17",
      "epss": "0.00166",
      "percentile": "0.06271"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-12730\",\"sourceIdentifier\":\"psirt@us.ibm.com\",\"published\":\"2026-08-05T16:16:49.440\",\"lastModified\":\"2026-08-10T19:34:48.890\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.\"}],\"affected\":[{\"source\":\"psirt@us.ibm.com\",\"affectedData\":[{\"vendor\":\"IBM\",\"product\":\"Business Automation Workflow containers and traditional\",\"cpes\":[\"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:26.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:interim_fix_005:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:interim_fix_007:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:interim_fix_009:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"26.0.0\",\"status\":\"affected\"},{\"version\":\"25.0.0\",\"lessThanOrEqual\":\"25.0.0 Interim Fix 005\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"24.0.1\",\"lessThanOrEqual\":\"24.0.1 Interim Fix 007\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"24.0.0\",\"lessThanOrEqual\":\"24.0.0 Interim Fix 009\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N\",\"baseScore\":3.8,\"baseSeverity\":\"LOW\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.2,\"impactScore\":2.5}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-05T17:59:02.663931Z\",\"id\":\"CVE-2026-12730\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-297\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:containers:*:*:*\",\"matchCriteriaId\":\"EF29B7C7-5024-4A85-ADE5-D94E9002181D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"475B8FBB-09BA-4509-B007-2AA407DCA3B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:containers:*:*:*\",\"matchCriteriaId\":\"8464D4F4-1F9A-479B-B689-C6E90BC3AF45\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"6EDAD1E1-BDB8-4B23-AA83-7678355AB5CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:containers:*:*:*\",\"matchCriteriaId\":\"0FE0DB1D-5728-4075-BE84-48F06E22FDF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"5EF56DFD-48DB-4DA1-9056-A980DC7CA697\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:containers:*:*:*\",\"matchCriteriaId\":\"A4AB37B4-DF91-4DC7-AFB9-107E5B1B2BF6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"C1711BF6-5F1A-4238-A4D0-C80602B11C49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:containers:*:*:*\",\"matchCriteriaId\":\"79318EB6-001D-4D75-952C-87297C90A0C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"11C6C4D0-E200-43E3-A779-ED7BBB057032\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:containers:*:*:*\",\"matchCriteriaId\":\"38F4B5AC-AC9D-48E7-9EC8-48C086CC62A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"33079C3C-3415-4305-A015-37C46BBB46E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:containers:*:*:*\",\"matchCriteriaId\":\"73BAD8DC-3081-4D07-8E65-7501351DE025\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"784B6E6A-2F7F-488F-A190-FC6CAE7920F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:containers:*:*:*\",\"matchCriteriaId\":\"87CBC521-DDDD-4D6B-B82F-3D7260CB7C67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"DC646C5B-D3F9-4B8E-94F2-44F42A17B0B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:containers:*:*:*\",\"matchCriteriaId\":\"7675FC59-E23F-4816-B1EF-DB8E1CEA30DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"68F2FFA3-761D-4E58-B1E9-CAC651BF620B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if009:*:*:containers:*:*:*\",\"matchCriteriaId\":\"1492C2D4-4CB6-4EF3-B64C-31F9A7C8508F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if009:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"F25CC4F0-EAD4-4357-A693-0596DFA77976\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:containers:*:*:*\",\"matchCriteriaId\":\"D5D9EC44-05CE-44FA-AFDE-A4FA326A54F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"DCBC0FB0-E803-4CC3-9CDD-9DA0D91EE08F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:containers:*:*:*\",\"matchCriteriaId\":\"AD2EC4AD-EF47-450F-AA73-8BEE3DADEA1A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"E3E71BEB-B904-48F3-8665-466ACC9AC1B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:containers:*:*:*\",\"matchCriteriaId\":\"0CFCCD13-9342-4D3D-BE9C-ABCA4EA27229\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"C345B5B1-B7B2-401D-A554-B7E3F6FF29B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:containers:*:*:*\",\"matchCriteriaId\":\"8F82A13E-F355-4B56-A9ED-9B8D728D95D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"0BAEF1EF-59E7-4502-B890-5F89EEE81DCB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:containers:*:*:*\",\"matchCriteriaId\":\"5797C332-AE9A-40BF-BAA4-7ECDDEAA907C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"AAEC8FDE-1BAE-477C-BF27-F136B877DAAE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:containers:*:*:*\",\"matchCriteriaId\":\"D0F5EB0D-CAF6-45BC-967B-472F1C2833D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"E2D1C66F-BAA2-414C-A1F0-651526353081\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:containers:*:*:*\",\"matchCriteriaId\":\"63C11C87-A5EF-406D-86A5-13B7CB4BBB82\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"5BEFDA15-7D42-48CF-B89C-E72811A796B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if007:*:*:containers:*:*:*\",\"matchCriteriaId\":\"A1E48A02-67B2-46D0-A693-EF289F6EA410\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if007:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"B7C132CE-5918-475C-9CB0-686C7A916D7B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:containers:*:*:*\",\"matchCriteriaId\":\"3058E645-44E1-4FF0-9A97-E04324BB8968\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"EA15073D-EA2F-479E-B7DC-F6280806410E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:containers:*:*:*\",\"matchCriteriaId\":\"0E06ACEC-AC03-41AA-91C7-BA84457847A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"D3A28BF1-C38A-4600-BFB5-C4EFD40BEA0B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:containers:*:*:*\",\"matchCriteriaId\":\"6AD427CB-B553-4ACB-B2A3-1648848D6D09\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"03533F96-66A4-430D-B7A2-C77CE6A65B32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:containers:*:*:*\",\"matchCriteriaId\":\"4528EEFE-9EA6-4103-AC2B-581816A4776C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"DFE51BD6-9AF7-43BE-9EE3-1A16420CBC97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if004:*:*:containers:*:*:*\",\"matchCriteriaId\":\"102DB0FF-47B9-4CCF-A490-CD511F9B93BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if004:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"23475BA8-BE2F-4A92-A1E0-19581FD5AB95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if005:*:*:containers:*:*:*\",\"matchCriteriaId\":\"CC9713AA-5648-4E7C-8EC1-A7065C52D03C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if005:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"72F30A37-91E3-44D4-A185-E9DFA550FEEC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:26.0.0:-:*:*:containers:*:*:*\",\"matchCriteriaId\":\"74C81C62-F323-4E91-9169-E4C114649B78\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:26.0.0:-:*:*:traditional:*:*:*\",\"matchCriteriaId\":\"74599AD8-9ECD-44FB-B63E-7EDC41B11F65\"}]}]}],\"references\":[{\"url\":\"https://www.ibm.com/support/pages/node/7282596\",\"source\":\"psirt@us.ibm.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-12730\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-05T17:59:02.663931Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-05T17:59:14.152Z\"}}], \"cna\": {\"title\": \"Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 3.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"LOW\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"HIGH\", \"confidentialityImpact\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:26.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:interim_fix_005:*:*:*:*:*:*\", \"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:interim_fix_007:*:*:*:*:*:*\", \"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:interim_fix_009:*:*:*:*:*:*\"], \"vendor\": \"IBM\", \"product\": \"Business Automation Workflow containers and traditional\", \"versions\": [{\"status\": \"affected\", \"version\": \"26.0.0\"}, {\"status\": \"affected\", \"version\": \"25.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"25.0.0 Interim Fix 005\"}, {\"status\": \"affected\", \"version\": \"24.0.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"24.0.1 Interim Fix 007\"}, {\"status\": \"affected\", \"version\": \"24.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"24.0.0 Interim Fix 009\"}]}], \"solutions\": [{\"lang\": \"en\", \"value\": \"IBM strongly recommends addressing the vulnerability now by upgrading.\\n\\nAffected Product(s)Version(s)Remediation / FixIBM Business Automation Workflow containersV26.0.0Apply container  26.0.0-IF001 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-containers-26000-interim-fixes IBM Business Automation Workflow traditionalV26.0.0Apply traditional  26.0.0-IF001 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-26000-interim-fixes IBM Business Automation Workflow containersV25.0.0 - V25.0.0-IF005Apply container  25.0.0-IF006 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-containers-25000-interim-fixes IBM Business Automation Workflow traditionalV25.0.0 - V25.0.0-IF005Apply traditional  25.0.0-IF006 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-25000-interim-fixes IBM Business Automation Workflow containersV24.0.1 - V24.0.1-IF007Apply container  24.0.1-IF008 https://www.ibm.com/support/pages/node/7183042 IBM Business Automation Workflow traditionalV24.0.1 - V24.0.1-IF007Apply traditional  24.0.1-IF008 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-24010-interim-fixes IBM Business Automation Workflow containersV24.0.0 - V24.0.0-IF009Apply container  24.0.0-IF010 https://www.ibm.com/support/pages/node/7159792 IBM Business Automation Workflow traditionalV24.0.0 - V24.0.0-IF009Apply traditional  24.0.0-IF010 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-24000-interim-fixes\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading.\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eAffected Product(s)\u003c/th\u003e\u003cth\u003eVersion(s)\u003c/th\u003e\u003cth\u003eRemediation / Fix\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow containers\u003c/td\u003e\u003ctd\u003eV26.0.0\u003c/td\u003e\u003ctd\u003eApply container \u003ca href=\\\"https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-containers-26000-interim-fixes\\\" rel=\\\"nofollow\\\"\u003e26.0.0-IF001\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow traditional\u003c/td\u003e\u003ctd\u003eV26.0.0\u003c/td\u003e\u003ctd\u003eApply traditional \u003ca href=\\\"https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-26000-interim-fixes\\\" rel=\\\"nofollow\\\"\u003e26.0.0-IF001\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow containers\u003c/td\u003e\u003ctd\u003eV25.0.0 - V25.0.0-IF005\u003c/td\u003e\u003ctd\u003eApply container \u003ca href=\\\"https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-containers-25000-interim-fixes\\\" rel=\\\"nofollow\\\"\u003e25.0.0-IF006\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow traditional\u003c/td\u003e\u003ctd\u003eV25.0.0 - V25.0.0-IF005\u003c/td\u003e\u003ctd\u003eApply traditional \u003ca href=\\\"https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-25000-interim-fixes\\\" rel=\\\"nofollow\\\"\u003e25.0.0-IF006\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow containers\u003c/td\u003e\u003ctd\u003eV24.0.1 - V24.0.1-IF007\u003c/td\u003e\u003ctd\u003eApply container \u003ca href=\\\"https://www.ibm.com/support/pages/node/7183042\\\" rel=\\\"nofollow\\\"\u003e24.0.1-IF008\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow traditional\u003c/td\u003e\u003ctd\u003eV24.0.1 - V24.0.1-IF007\u003c/td\u003e\u003ctd\u003eApply traditional \u003ca href=\\\"https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-24010-interim-fixes\\\" rel=\\\"nofollow\\\"\u003e24.0.1-IF008\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow containers\u003c/td\u003e\u003ctd\u003eV24.0.0 - V24.0.0-IF009\u003c/td\u003e\u003ctd\u003eApply container \u003ca href=\\\"https://www.ibm.com/support/pages/node/7159792\\\" rel=\\\"nofollow\\\"\u003e24.0.0-IF010\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Business Automation Workflow traditional\u003c/td\u003e\u003ctd\u003eV24.0.0 - V24.0.0-IF009\u003c/td\u003e\u003ctd\u003eApply traditional \u003ca href=\\\"https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-24000-interim-fixes\\\" rel=\\\"nofollow\\\"\u003e24.0.0-IF010\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.ibm.com/support/pages/node/7282596\", \"tags\": [\"vendor-advisory\", \"patch\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eIBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-297\", \"description\": \"CWE-297 Improper Validation of Certificate with Host Mismatch\"}]}], \"providerMetadata\": {\"orgId\": \"9a959283-ebb5-44b6-b705-dcc2bbced522\", \"shortName\": \"ibm\", \"dateUpdated\": \"2026-08-05T17:25:51.335Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-12730\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T17:59:18.166Z\", \"dateReserved\": \"2026-06-19T15:59:20.718Z\", \"assignerOrgId\": \"9a959283-ebb5-44b6-b705-dcc2bbced522\", \"datePublished\": \"2026-08-05T15:57:37.007Z\", \"assignerShortName\": \"ibm\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-12730

Vulnerability from fkie_nvd - Published: 2026-08-05 16:16 - Updated: 2026-08-10 19:34

Severity

3.8 (Low) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Summary

References

	URL	Tags
	psirt@us.ibm.com	https://www.ibm.com/support/pages/node/7282596	Vendor Advisory

Impacted products

Vendor	Product	Version
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.0
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	24.0.1
ibm	business_automation_workflow	25.0.0
ibm	business_automation_workflow	25.0.0
ibm	business_automation_workflow	25.0.0
ibm	business_automation_workflow	25.0.0
ibm	business_automation_workflow	25.0.0
ibm	business_automation_workflow	25.0.0
ibm	business_automation_workflow	25.0.0
ibm	business_automation_workflow	25.0.0
ibm	business_automation_workflow	25.0.0
ibm	business_automation_workflow	25.0.0
ibm	business_automation_workflow	25.0.0
ibm	business_automation_workflow	25.0.0
ibm	business_automation_workflow	26.0.0
ibm	business_automation_workflow	26.0.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:26.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:interim_fix_005:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:interim_fix_007:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:interim_fix_009:*:*:*:*:*:*"
          ],
          "product": "Business Automation Workflow containers and traditional",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "26.0.0"
            },
            {
              "lessThanOrEqual": "25.0.0 Interim Fix 005",
              "status": "affected",
              "version": "25.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "24.0.1 Interim Fix 007",
              "status": "affected",
              "version": "24.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "24.0.0 Interim Fix 009",
              "status": "affected",
              "version": "24.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:containers:*:*:*",
              "matchCriteriaId": "EF29B7C7-5024-4A85-ADE5-D94E9002181D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:traditional:*:*:*",
              "matchCriteriaId": "475B8FBB-09BA-4509-B007-2AA407DCA3B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:containers:*:*:*",
              "matchCriteriaId": "8464D4F4-1F9A-479B-B689-C6E90BC3AF45",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:traditional:*:*:*",
              "matchCriteriaId": "6EDAD1E1-BDB8-4B23-AA83-7678355AB5CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:containers:*:*:*",
              "matchCriteriaId": "0FE0DB1D-5728-4075-BE84-48F06E22FDF5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:traditional:*:*:*",
              "matchCriteriaId": "5EF56DFD-48DB-4DA1-9056-A980DC7CA697",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:containers:*:*:*",
              "matchCriteriaId": "A4AB37B4-DF91-4DC7-AFB9-107E5B1B2BF6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:traditional:*:*:*",
              "matchCriteriaId": "C1711BF6-5F1A-4238-A4D0-C80602B11C49",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:containers:*:*:*",
              "matchCriteriaId": "79318EB6-001D-4D75-952C-87297C90A0C8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:traditional:*:*:*",
              "matchCriteriaId": "11C6C4D0-E200-43E3-A779-ED7BBB057032",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:containers:*:*:*",
              "matchCriteriaId": "38F4B5AC-AC9D-48E7-9EC8-48C086CC62A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:traditional:*:*:*",
              "matchCriteriaId": "33079C3C-3415-4305-A015-37C46BBB46E4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:containers:*:*:*",
              "matchCriteriaId": "73BAD8DC-3081-4D07-8E65-7501351DE025",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:traditional:*:*:*",
              "matchCriteriaId": "784B6E6A-2F7F-488F-A190-FC6CAE7920F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:containers:*:*:*",
              "matchCriteriaId": "87CBC521-DDDD-4D6B-B82F-3D7260CB7C67",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:traditional:*:*:*",
              "matchCriteriaId": "DC646C5B-D3F9-4B8E-94F2-44F42A17B0B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:containers:*:*:*",
              "matchCriteriaId": "7675FC59-E23F-4816-B1EF-DB8E1CEA30DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:traditional:*:*:*",
              "matchCriteriaId": "68F2FFA3-761D-4E58-B1E9-CAC651BF620B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if009:*:*:containers:*:*:*",
              "matchCriteriaId": "1492C2D4-4CB6-4EF3-B64C-31F9A7C8508F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if009:*:*:traditional:*:*:*",
              "matchCriteriaId": "F25CC4F0-EAD4-4357-A693-0596DFA77976",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:containers:*:*:*",
              "matchCriteriaId": "D5D9EC44-05CE-44FA-AFDE-A4FA326A54F7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:traditional:*:*:*",
              "matchCriteriaId": "DCBC0FB0-E803-4CC3-9CDD-9DA0D91EE08F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:containers:*:*:*",
              "matchCriteriaId": "AD2EC4AD-EF47-450F-AA73-8BEE3DADEA1A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:traditional:*:*:*",
              "matchCriteriaId": "E3E71BEB-B904-48F3-8665-466ACC9AC1B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:containers:*:*:*",
              "matchCriteriaId": "0CFCCD13-9342-4D3D-BE9C-ABCA4EA27229",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:traditional:*:*:*",
              "matchCriteriaId": "C345B5B1-B7B2-401D-A554-B7E3F6FF29B8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:containers:*:*:*",
              "matchCriteriaId": "8F82A13E-F355-4B56-A9ED-9B8D728D95D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:traditional:*:*:*",
              "matchCriteriaId": "0BAEF1EF-59E7-4502-B890-5F89EEE81DCB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:containers:*:*:*",
              "matchCriteriaId": "5797C332-AE9A-40BF-BAA4-7ECDDEAA907C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:traditional:*:*:*",
              "matchCriteriaId": "AAEC8FDE-1BAE-477C-BF27-F136B877DAAE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:containers:*:*:*",
              "matchCriteriaId": "D0F5EB0D-CAF6-45BC-967B-472F1C2833D9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:traditional:*:*:*",
              "matchCriteriaId": "E2D1C66F-BAA2-414C-A1F0-651526353081",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:containers:*:*:*",
              "matchCriteriaId": "63C11C87-A5EF-406D-86A5-13B7CB4BBB82",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:traditional:*:*:*",
              "matchCriteriaId": "5BEFDA15-7D42-48CF-B89C-E72811A796B7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if007:*:*:containers:*:*:*",
              "matchCriteriaId": "A1E48A02-67B2-46D0-A693-EF289F6EA410",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if007:*:*:traditional:*:*:*",
              "matchCriteriaId": "B7C132CE-5918-475C-9CB0-686C7A916D7B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:containers:*:*:*",
              "matchCriteriaId": "3058E645-44E1-4FF0-9A97-E04324BB8968",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:traditional:*:*:*",
              "matchCriteriaId": "EA15073D-EA2F-479E-B7DC-F6280806410E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:containers:*:*:*",
              "matchCriteriaId": "0E06ACEC-AC03-41AA-91C7-BA84457847A7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:traditional:*:*:*",
              "matchCriteriaId": "D3A28BF1-C38A-4600-BFB5-C4EFD40BEA0B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:containers:*:*:*",
              "matchCriteriaId": "6AD427CB-B553-4ACB-B2A3-1648848D6D09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:traditional:*:*:*",
              "matchCriteriaId": "03533F96-66A4-430D-B7A2-C77CE6A65B32",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:containers:*:*:*",
              "matchCriteriaId": "4528EEFE-9EA6-4103-AC2B-581816A4776C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:traditional:*:*:*",
              "matchCriteriaId": "DFE51BD6-9AF7-43BE-9EE3-1A16420CBC97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if004:*:*:containers:*:*:*",
              "matchCriteriaId": "102DB0FF-47B9-4CCF-A490-CD511F9B93BE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if004:*:*:traditional:*:*:*",
              "matchCriteriaId": "23475BA8-BE2F-4A92-A1E0-19581FD5AB95",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if005:*:*:containers:*:*:*",
              "matchCriteriaId": "CC9713AA-5648-4E7C-8EC1-A7065C52D03C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if005:*:*:traditional:*:*:*",
              "matchCriteriaId": "72F30A37-91E3-44D4-A185-E9DFA550FEEC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:26.0.0:-:*:*:containers:*:*:*",
              "matchCriteriaId": "74C81C62-F323-4E91-9169-E4C114649B78",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:26.0.0:-:*:*:traditional:*:*:*",
              "matchCriteriaId": "74599AD8-9ECD-44FB-B63E-7EDC41B11F65",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server."
    }
  ],
  "id": "CVE-2026-12730",
  "lastModified": "2026-08-10T19:34:48.890",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 3.8,
          "baseSeverity": "LOW",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 2.5,
        "source": "psirt@us.ibm.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-12730",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-08-05T17:59:02.663931Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-08-05T16:16:49.440",
  "references": [
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.ibm.com/support/pages/node/7282596"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-297"
        }
      ],
      "source": "psirt@us.ibm.com",
      "type": "Secondary"
    }
  ]
}

GHSA-6486-8HJQ-Q8VF

Vulnerability from github – Published: 2026-08-05 18:31 – Updated: 2026-08-05 18:31

Details

Severity

3.8 (Low)


                  
                    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-12730"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-297"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-05T16:16:49Z",
    "severity": "LOW"
  },
  "details": "IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.",
  "id": "GHSA-6486-8hjq-q8vf",
  "modified": "2026-08-05T18:31:35Z",
  "published": "2026-08-05T18:31:35Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12730"
    },
    {
      "type": "WEB",
      "url": "https://www.ibm.com/support/pages/node/7282596"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

WID-SEC-W-2026-2672

Vulnerability from csaf_certbund - Published: 2026-08-05 22:00 - Updated: 2026-08-05 22:00

Summary

IBM Business Automation Workflow: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Severity

Niedrig

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: IBM Business Automation Workflow ist eine Lösung zur Automatisierung von Arbeitsabläufen.

Angriff: Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Business Automation Workflow ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Betroffene Betriebssysteme: - Linux - UNIX - Windows

CVE-2026-12730

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
IBM Business Automation Workflow <26.0.0-IF001 IBM / Business Automation Workflow		<26.0.0-IF001
IBM Business Automation Workflow <25.0.0-IF006 IBM / Business Automation Workflow		<25.0.0-IF006
IBM Business Automation Workflow <24.0.1-IF008 IBM / Business Automation Workflow		<24.0.1-IF008
IBM Business Automation Workflow <24.0.0-IF010 IBM / Business Automation Workflow		<24.0.0-IF010

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.ibm.com/support/pages/node/7282596	external
https://euvd.enisa.europa.eu/enisa/EUVD-2026-53437	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "niedrig"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "IBM Business Automation Workflow ist eine L\u00f6sung zur Automatisierung von Arbeitsabl\u00e4ufen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Business Automation Workflow ausnutzen, um Sicherheitsvorkehrungen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-2672 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2672.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-2672 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2672"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin vom 2026-08-05",
        "url": "https://www.ibm.com/support/pages/node/7282596"
      },
      {
        "category": "external",
        "summary": "EU Vulnerability Database vom 2026-08-05",
        "url": "https://euvd.enisa.europa.eu/enisa/EUVD-2026-53437"
      }
    ],
    "source_lang": "en-US",
    "title": "IBM Business Automation Workflow: Schwachstelle erm\u00f6glicht Umgehen von Sicherheitsvorkehrungen",
    "tracking": {
      "current_release_date": "2026-08-05T22:00:00.000+00:00",
      "generator": {
        "date": "2026-08-06T11:01:07.086+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-2672",
      "initial_release_date": "2026-08-05T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-08-05T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c26.0.0-IF001",
                "product": {
                  "name": "IBM Business Automation Workflow \u003c26.0.0-IF001",
                  "product_id": "T057634"
                }
              },
              {
                "category": "product_version",
                "name": "26.0.0-IF001",
                "product": {
                  "name": "IBM Business Automation Workflow 26.0.0-IF001",
                  "product_id": "T057634-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:business_automation_workflow:26.0.0-if001"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c25.0.0-IF006",
                "product": {
                  "name": "IBM Business Automation Workflow \u003c25.0.0-IF006",
                  "product_id": "T057635"
                }
              },
              {
                "category": "product_version",
                "name": "25.0.0-IF006",
                "product": {
                  "name": "IBM Business Automation Workflow 25.0.0-IF006",
                  "product_id": "T057635-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:business_automation_workflow:25.0.0-if006"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c24.0.1-IF008",
                "product": {
                  "name": "IBM Business Automation Workflow \u003c24.0.1-IF008",
                  "product_id": "T057636"
                }
              },
              {
                "category": "product_version",
                "name": "24.0.1-IF008",
                "product": {
                  "name": "IBM Business Automation Workflow 24.0.1-IF008",
                  "product_id": "T057636-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:business_automation_workflow:24.0.1-if008"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c24.0.0-IF010",
                "product": {
                  "name": "IBM Business Automation Workflow \u003c24.0.0-IF010",
                  "product_id": "T057637"
                }
              },
              {
                "category": "product_version",
                "name": "24.0.0-IF010",
                "product": {
                  "name": "IBM Business Automation Workflow 24.0.0-IF010",
                  "product_id": "T057637-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:business_automation_workflow:24.0.0-if010"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Business Automation Workflow"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-12730",
      "product_status": {
        "known_affected": [
          "T057634",
          "T057635",
          "T057636",
          "T057637"
        ]
      },
      "release_date": "2026-08-05T22:00:00.000+00:00",
      "title": "CVE-2026-12730"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-12730 (GCVE-0-2026-12730)

FKIE_CVE-2026-12730

GHSA-6486-8HJQ-Q8VF

WID-SEC-W-2026-2672

Tags

Sightings

Nomenclature