Tag

#IBM App Connect Enterprise

articleHIGH 7.7

CVE-2026-81832: IBM App Connect Enterprise and Integration Bus for z/OS SAP Adapter XXE Vulnerability

A critical vulnerability (CVE-2026-81832) has been identified in IBM App Connect Enterprise and Integration Bus for z/OS SAP Adapter, exposing them to XML external entity (XXE) attacks. This vulnerability has a CVSS score of 7.7 and affects multiple versions of these products. Organizations are advised to apply patches immediately to prevent potential exploitation.

1 source
newsCRITICAL 9.8

Critical Directory Traversal Vulnerability in IBM App Connect Enterprise (CVE-2026-15435)

A critical vulnerability (CVE-2026-15435) with a CVSS score of 9.8 affects IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.27 and 13.0.1.0 through 13.0.7.2. An unauthenticated remote attacker could exploit this vulnerability to traverse directories and write arbitrary files on the system. Immediate action is required to mitigate this vulnerability.

1 source