Medium WID-SEC-2026-1058 1 CVE

IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service

Published Apr 12, 2026 · Updated May 20, 2026 · Revision 2 · de-DE

Vendor: IBM Vendor: Red Hat Product: App Connect Enterprise Product: openshift Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 1

Medium 5.9

CVE-2026-34043

Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability caused by CPU exhaustion. When serializing a specially crafted "array-like" object (an object …

yahoo serialize-javascript katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm

Mar 31, 2026

Revision history

2026-05-20 #2
Neue Updates von Red Hat aufgenommen
2026-04-12 #1
Initiale Fassung

References

IBM Security Bulletin 7269255 vom 2026-04-12
https://www.ibm.com/support/pages/node/7269255
Red Hat Security Advisory RHSA-2026:17448 vom 2026-05-20
https://access.redhat.com/errata/RHSA-2026:17448