CVE-2026-81859 PUBLISHED

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

Assigner: ibm
Reserved: 27.08.2026 Published: 04.09.2026 Updated: 04.09.2026

CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken or risky cryptographic algorithm.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 6.2

Product Status

Vendor IBM
Product Cloud Pak for Business Automation
Versions
  • affected from 26.0.0 to 26.0.0 Interim Fix 001 (incl.)
  • affected from 25.0.0 to 25.0.0 Interim Fix 005 (incl.)
  • affected from 24.0.1 to 24.0.1 Interim Fix 008 (incl.)
  • affected from 24.0.0 to 24.0.0 Interim Fix 009 (incl.)

Solutions

IBM strongly recommends addressing the vulnerability now.

Affected Product(s)Version(s)Remediation / FixIBM Cloud Pak for Business AutomationV26.0.0 - V26.0.0-IF001Apply security fix 26.0.0-IF002 https://www.ibm.com/support/pages/readme-ibm-cloud-pak-business-automation-2600-if002 IBM Cloud Pak for Business AutomationV25.0.0 - V25.0.0-IF005Apply security fix 25.0.0-IF006 https://www.ibm.com/support/pages/readme-ibm-cloud-pak-business-automation-2500-if006 IBM Cloud Pak for Business AutomationV24.0.1 - V24.0.1-IF008Apply security fix 24.0.1-IF009 https://www.ibm.com/support/pages/readme-ibm-cloud-pak-business-automation-2401-if009 IBM Cloud Pak for Business AutomationV24.0.0 - V24.0.0-IF009Apply security fix 24.0.0-IF010 https://www.ibm.com/support/pages/readme-ibm-cloud-pak-business-automation-2400-if010

Any open source library may be included in one or more sub-components of IBM Cloud Pak for Business Automation. Open source updates are not always synchronized across all components. The CVE in this bulletin are specifically addressed by

Credits

  • Vinayachandran.Sasidharan@ibm.com finder

References

Problem Types

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm CWE