CVE-2026-81859: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

Published Sep 1, 2026

Updated

CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken or risky cryptographic algorithm.

Affected Software

1 affected component

IBM IBM Cloud Pak for Business Automation (CP4BA) / IBM Enterprise Records

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Cloud Pak for Business Automation to a version that resolves this vulnerability.
Fixed in 26.0.0Patch 26.0.0-IF001
Upgrade
Upgrade IBM Cloud Pak for Business Automation to a version that resolves this vulnerability.
Fixed in 25.0.0Patch 25.0.0-IF005
Upgrade
Upgrade IBM Cloud Pak for Business Automation to a version that resolves this vulnerability.
Fixed in 24.0.1Patch 24.0.1-IF008
Upgrade
Upgrade IBM Cloud Pak for Business Automation to a version that resolves this vulnerability.
Fixed in 24.0.0Patch 24.0.0-IF009

Event History

Sep 1, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Sep 4, 2026

CVE Published

via MITRE·03:02 PM

Data Sourced

via MITRE·03:02 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7285931

Frequently Asked Questions

Who can exploit this issue?

A local attacker can exploit the issue. The available information does not identify any remote attack path.

What is the impact if exploitation succeeds?

Successful exploitation could allow disclosure of sensitive information. No integrity or availability impact is indicated by the provided severity vector.

What should be prioritized for remediation?

Apply the IBM Cloud Pak for Business Automation iFixes for August 2026 referenced in the vendor advisory. The affected component is IBM Enterprise Records.