CVE-2026-11864: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
IBM · Cloud Pak for Business Automation
Vendor fix available · Affected: IBM Cloud Pak for Business Automation · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 31% of scored CVEs
DescriptionCVE.org
IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and 24.0.0 through 24.0.0 Interim Fix 009 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- IBM · Cloud Pak for Business Automationfrom 26.0.0 up to and including 26.0.0 Interim Fix 001; from 25.0.0 up to and including 25.0.0 Interim Fix 005; from 24.0.1 up to and including 24.0.1 Interim Fix 008; from 24.0.0 up to and including 24.0.0 Interim Fix 009
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- IBM
- Published
- September 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2026-11864 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.