High · 7.5 CVE-2026-14519 EUVD-2026-51136GHSA-778p-m8r5-6r9r

IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings

Published Jul 30, 2026 · Updated Jul 30, 2026 · Assigned by ibm

Vendor: IBM Product: App Connect Enterprise

Description

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability.

Affected products

Vendor	Product	Affected	Fixed
IBM	App Connect Enterprise	13.0.1.0 – ≤ 13.0.7.2, 12.0.1.0 – ≤ 12.0.12.27	—

Advisories 1

WID-SEC-2026-2580 IBM App Connect Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 30, 2026

References

https://www.ibm.com/support/pages/node/7281897 vendor-advisory patch