CVE-2026-12730lowCWE-297

CVE-2026-12730: low-severity vulnerability in IBM Business Automation Workflow containers…

Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers

Published

Follow this CVE+ Monitor Business Automation Workflow containers and traditional

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.8epss 0.2%
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Affected products
IBM · Business Automation Workflow containers and traditional
Related CVEs — IBM Business Automation Workflow containers…

In the same product, most dangerous first.

CVE-2026-12752HIGHMultiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026EPSS 0.5%CVE-2026-12756HIGHMultiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026EPSS 0.5%CVE-2026-13107HIGHMultiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026EPSS 0.4%CVE-2026-12742MEDIUMMultiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026EPSS 0.2%CVE-2026-1248MEDIUMIBM Business Automation Workflow information leakEPSS 0.2%