Skip to content
OpenAdvisories
High WID-SEC-2026-3221 12 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen

Published Sep 7, 2026 · Updated Oct 13, 2026 · Revision 4 · de-DE

Vendor: IBM Product: App Connect Enterprise Product: Concert Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder Denial-of-Service-Zustände herbeizuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 12

  • High 8.8
    CVE-2026-75624

    IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Service

    IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization.

    IBM App Connect Enterprise
  • High 8.7
    CVE-2026-55968

    Apache Thrift: Node.js quadratic-time DoS in server receive transports

    Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issu…

    Apache Software Foundation Apache Thrift thrift thrift Debian Ubuntu
  • High 7.8
    CVE-2026-17133

    IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs

    IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

    IBM App Connect Enterprise
  • High 7.8
    CVE-2026-17156

    IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs

    IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.

    IBM App Connect Enterprise
  • High 7.8
    CVE-2026-17416

    IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs

    IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.

    IBM App Connect Enterprise
  • High 7.5
    CVE-2026-59870

    js-yaml quadratic-complexity denial of service via YAML11_SCHEMA !!omap parsing

    js-yaml is a JavaScript YAML parser and dumper. Prior to 3.15.1, 4.3.1, and 5.2.1, YAML11_SCHEMA support for the !!omap tag in src/tag/sequence/omap.ts uses omapTag.addItem() to perform a linear duplicate-key scan on every insertion, causing O(n^2) CPU consum…

    nodeca js-yaml renovate js-yaml Ubuntu Wolfi npm
  • High 7.5
    CVE-2026-73643

    js-yaml: Exponential parsing time in the flow collections leads to denial of service

    js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load() or loadAll() on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and…

    nodeca js-yaml renovate kubeflow-pipelines-apiserver Ubuntu Wolfi npm
  • Medium 5.3
    CVE-2026-59868

    js-yaml: YAML merge-key chains can force quadratic CPU consumption

    js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the…

    nodeca js-yaml js-yaml node-js-yaml Ubuntu npm
  • Medium 5.3
    CVE-2026-69207

    Hono: ReDoS in CORS middleware via Access-Control-Request-Headers

    Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.34, the built-in CORS middleware, hono/cors, is vulnerable to a regular expression denial of service (ReDoS). During a preflight OPTIONS request, the middlewar…

    honojs hono langfuse-3-worker langfuse-3-compat Wolfi npm
  • Medium 5.3
    CVE-2026-71848

    Hono: Algorithmic Complexity DoS in Language Middleware

    Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large n…

    honojs hono langfuse-3-worker langfuse-3-compat Wolfi npm
  • Medium 4.8
    CVE-2026-71850

    Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure

    Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo() from hono/jsx retains the result of a server side render and reuses it for later renders with comparator equal props, and request scoped values…

    honojs hono langfuse-3-worker langfuse-3-compat Wolfi npm
  • Low 3.7
    CVE-2026-71849

    Hono: Proxy Helper does not remove response headers listed in the `Connection` header

    Hono is a Web application framework that provides support for any JavaScript runtime. From 4.7.0 to 4.12.33, the Proxy Helper proxy() function in hono/proxy does not remove response headers named by the origin's Connection header. Per RFC 9110 Section 7.6.1, …

    honojs hono langfuse-3-worker langfuse-3-compat Wolfi npm

Revision history

  1. #4

    Neue Updates von IBM aufgenommen

  2. #3

    Referenz(en) aufgenommen: EUVD-2026-77786, EUVD-2026-77785, EUVD-2026-77783

  3. #2

    Referenz(en) aufgenommen: EUVD-2026-75803

  4. #1

    Initiale Fassung

References