PT-2026-66538 · Ibm · Webmethods Integration
CVE-2026-12118
·
Published
2026-07-30
·
Updated
2026-08-10
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IBM webMethods Integration (on prem) version 10.11
IBM webMethods Integration (on prem) version 10.15
Description
An unauthenticated remote attacker can execute arbitrary code on the system. This is possible due to the deserialization of untrusted data, a process where the application incorrectly reconstructs data from a stream, allowing malicious objects to be executed.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Webmethods Integration