Skip to content
OpenAdvisories
High WID-SEC-2026-3831 3 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen

Published Oct 8, 2026 · Updated Nov 8, 2026 · Revision 3 · de

Vendor: IBM Product: App Connect Enterprise Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 3

  • Critical 9.8
    CVE-2026-92559

    IBM App Connect Enterprise is vulnerable to a credential exposure

    IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.

    IBM App Connect Enterprise
  • High 8.2
    CVE-2026-40345 Public exploit

    deepmerge-ts: Stack exhaustion when merging recursive object graphs

    deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. Prior to 8.0.0, the deepmerge, deepmergeCustom, deepmergeInto, and deepmergeIntoCustom APIs do not track visited objects or object pairs when recursively mergi…

    RebeccaStevens deepmerge-ts langfuse-3-worker langfuse-3 Wolfi npm
  • Low 2.5
    CVE-2026-18194

    IBM App Connect Enterprise is vulnerable to a clickjacking attack

    IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to perform unauthorized actions due to missing anti-clickjacking controls.

    IBM App Connect Enterprise

Revision history

  1. #3

    Referenz(en) aufgenommen: EUVD-2026-119711

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-106861

  3. #1

    Initiale Fassung

References