WID-SEC-W-2026-2112

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

IBM App Connect Enterprise: Mehrere Schwachstellen ermöglichen Manipulation von Daten

view advisory published 2026-06-28

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Daten zu manipulieren.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-41907UShigh7.5—
uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or lar…
CVE-2026-41988USlow2.5—
uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used,…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan