CVE-2026-19128

Vendor

IBM

Product

API Connect

CVSS v3.1

7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness

CWE-918

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 30
   CVE NVD 2h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send unauthorized requests from the system due to server-side…

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support…

   CVSS 7.5 CVE-2026-19128 IBM