CVE-2026-118904

CVSS 8.1 (high) · published 2026-11-08

IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.

Weakness: CWE-287

Source: NVD CVE-2026-118904

References

• https://www.ibm.com/support/pages/node/7295306

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.