WID-SEC-W-2026-2076

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

IBM App Connect Enterprise (Apache Thrift): Mehrere Schwachstellen

view advisory published 2026-06-24

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen, und um nicht näher spezifizierte Auswirkungen zu verursachen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-43870US——
Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Re…
CVE-2026-41636UShigh7.5—
Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan