Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-13915 EUVD-2025-205432GHSA-gp88-9wrc-jxf5

Authentication bypass in IBM API Connect

Published Dec 26, 2025 · Updated Feb 26, 2026 · Assigned by ibm

Description

IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.

Affected products

VendorProductAffectedFixed
IBM API Connect 10.0.8.0 – ≤ 10.0.8.5, 10.0.11.0 —

References