{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/webmethods-integration-server-12.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:webmethods_integration_server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-118904"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["webMethods Integration Server (12.1)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.\u003c/p\u003e\n","date_modified":"2026-11-08T21:27:32Z","date_published":"2026-11-08T21:27:32Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-webmethods-auth-bypass-67655370/","summary":"IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.","title":"IBM webMethods Integration Server: Improper authentication security bypass (CVE-2026-118904)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-webmethods-auth-bypass-67655370/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:webmethods_integration_server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-117545"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-117545\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["webMethods Integration Server (12.1)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM webMethods Integration Server 12.1 is vulnerable to an improper authentication flaw (CVE-2026-117545). This vulnerability could allow a remote authenticated attacker to bypass security restrictions. The issue has been assigned a CVSS v3.1 Base Score of 8.8.\u003c/p\u003e\n","date_modified":"2026-11-08T20:56:55Z","date_published":"2026-11-08T19:35:15Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-webmethods-auth-bypass/","summary":"IBM webMethods Integration Server 12.1 contains an improper authentication vulnerability that permits a remote authenticated attacker to bypass security restrictions.","title":"IBM webMethods Integration Server: Authentication bypass (CVE-2026-117545)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-webmethods-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - WebMethods Integration Server (12.1)","version":"https://jsonfeed.org/version/1.1"}