CVE-2026-12756
HIGH
NVD
CVSS Score
7.1
Severity
HIGH
Published
Sep 14, 2026
Vendor
unknown
Description
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.