Medium WID-SEC-2026-2112 2 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen ermöglichen Manipulation von Daten

Published Jun 28, 2026 · Updated Jun 28, 2026 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Daten zu manipulieren.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 2

High 8.1

CVE-2026-41907

uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided

uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silent partial writes into caller-provided buffers. Thi…

uuidjs uuid langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Wolfi npm

Apr 24, 2026
Low 3.2

CVE-2026-41988

uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6…

uuidjs uuid node-uuid node-uuid Debian Ubuntu

Apr 23, 2026

Revision history

2026-06-28 #1
Initiale Fassung

References

IBM Security Bulletin 7278325 vom 2026-06-28
https://www.ibm.com/support/pages/node/7278325