6.5
Medium
CVE-2026-12085 IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through…
Description
IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| UCD - IBM UrbanCode Deploy 7.3 | 7.3.0 → 7.3.2.18 | No fix stated |
| UCD - IBM DevOps Deploy 8.2 | 8.2.0 → 8.2.1.0 | No fix stated |
| UCD - IBM DevOps Deploy 8.1 | 8.1.0 → 8.1.2.6 | No fix stated |
| UCD - IBM DevOps Deploy 8.0 | 8.0 → 8.0.1.13 | No fix stated |
Other CVEs of UCD - IBM UrbanCode Deploy
The 5 CVEs of UCD - IBM UrbanCode Deploy →
CVE-2026-78658
IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.25, and 7.3 through 7.3.2.20 and IBM UCD - IBM DevOps Deploy 8.0…
6.5
Medium
CVE-2026-10569
IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0…
4.3
Medium
CVE-2026-12086
IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0…
6.2
Medium
CVE-2025-36360
IBM UCD - IBM UrbanCode Deploy 7.1 through 7.1.2.27, 7.2 through 7.2.3.20, and 7.3 through 7.3.2.15 and IBM UCD - IBM…
5.0
Medium