CVE-2026-12758
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Sep 14, 2026
Vendor
unknown
Description
IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.