CVE-2026-11864

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Business Automation versions 26.0.0 through 26.0.0 Interim Fix 001 IBM Cloud Pak for Business Automation versions 25.0.0 through 25.0.0 Interim Fix 005 IBM Cloud Pak for Business Automation versions 24.0.1 through 24.0.1 Interim Fix 008 IBM Cloud Pak for Business Automation versions 24.0.0 through 24.0.0 Interim Fix 009

Description An XPath injection flaw exists that allows an authenticated attacker to exfiltrate sensitive application data or determine the structure of the XML document. XPath injection is a technique where an attacker inserts malicious expressions into an XPath query to manipulate the logic of the XML data retrieval process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.