Is CVE-2026-12085 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-12085?

CVE-2026-12085 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-12085

Description

IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.