CVE-2026-12086

Summary

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 stores potentially sensitive information in log files that could be read by a local user.

Affected Software

VendorProductVersion RangeStatus
IBMUCD - IBM UrbanCode Deploy7.2.0 <= 7.2.3.23affected
IBMUCD - IBM UrbanCode Deploy7.3.0 <= 7.3.2.18affected
IBMUCD - IBM DevOps Deploy8.0 <= 8.0.1.13affected
IBMUCD - IBM DevOps Deploy8.1.0 <= 8.1.2.6affected
IBMUCD - IBM DevOps Deploy8.2.0 <= 8.2.1.0affected

Weaknesses

  • CWE-532: CWE-532 Insertion of Sensitive Information into Log File

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References