Skip to content

CVE record · 1 source

CVE-2026-18535

CVSS 9.6

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of Service (ReDoS) attack and…

Vendor: IBM
Product: API Connect
CVSS v3.1: 9.6 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
Weakness: CWE-1333
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

38

CVE NVD 2h ago

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of Service (ReDoS) attack and…

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of Service (ReDoS) attack and to improper neutralisation of wildcard query operators.

CVSS 9.6 CVE-2026-18535 IBM