CVE-2026-117545: IBM webMethods Integration Server is vulnerable of bypassing the two-factor authentication mechanism.
Published Nov 8, 2026
·Updated
IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM webMethods Integration Serverto a version that resolves this vulnerability.Patch IS_12.1_Core_Fix1
Event History
Nov 8, 2026
CVE Published
via MITRE·05:06 PM
Data Sourced
via MITRE·05:06 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be remotely authenticated and requires low privileges. No user interaction is required.
2
What impact could successful exploitation have?
Successful exploitation could bypass two-factor authentication and security restrictions. The listed impact includes high confidentiality, integrity, and availability impact.
3
Which product version is identified as affected?
The affected product identified in the available data is IBM webMethods Integration Server 12.1.