PT-2026-66538 · Ibm · Webmethods Integration

CVE-2026-12118 · Published 2026-07-30 · Updated 2026-07-30

Mitre

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-12118

Affected Products

Webmethods Integration

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-12118 · Security Note
• https://ibm.com/support/pages/node/7278857 · Patch, Vendor Advisory