CVE-2026-12762
Medium · 5.3CVSS
5.3
EPSS
0.4%
Published
Aug 5, 2026
CISA due date
—
The record
IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119199 Nuxt is an open-source web development framework for Vue.js. CWE-538
- CVE-2026-115711 Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538)… CWE-538
- CVE-2026-115707 Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538)… CWE-538
- CVE-2026-109970 A flaw was found in the clevis PKCS#11 pin. CWE-538
- CVE-2026-67361 Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory… CWE-538
- CVE-2026-19229 A vulnerability was determined in SourceCodester Online Clothing Store. CWE-538
- CVE-2026-15574 A flaw was found in the vllm-orchestrator-gateway component. CWE-538
- GHSA-9c83-rr99-vfwj MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at… CWE-538