CVE-2026-18838

Vendor

IBM

Product

API Connect

CVSS v3.1

9.4 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Weakness

CWE-290

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 38
   CVE NVD 2h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and modify API configurations due to improper…

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and modify API configurations due to improper authentication. Identity information supplied in requests is not sufficiently…

   CVSS 9.4 CVE-2026-18838 IBM