Vulnerabilities

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain unauthorized access due to improper authorization.

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain unauthorized access due to improper authorization. Tenant context is not sufficiently verified against the authenticated user, which could allow access to another tenant's resources.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

API Connect

CVSS v3.1

8.3 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Weakness

CWE-290

Exposure class

Web platform

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-19121 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 20
   CVE NVD 2h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated privileged attacker to send unauthorized requests from the system due to…

   CVSS 3.8 CVE-2026-19122 IBM