WID-SEC-W-2026-3831

DeutschShown in its original language — a full translation is planned for a future version.

IBM App Connect Enterprise: Mehrere Schwachstellen

view advisory published 2026-10-08

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-92559US	critical9.8	0.53% (45th)	—	2026-10-20
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.
CVE-2026-40345US	—	0.52% (44th)	Exploit	2026-08-20
deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. Prior to 8.0.0, the deepmerge, deepmergeCustom, deepmergeInto, and deepmergeInto…
CVE-2026-18194US	—	—	—	—

references

External citations — patches, advisories, analysis.

WID-SEC-W-2026-3831 - CSAF Versionself
WID-SEC-2026-3831 - Portal Versionself
IBM Security Bulletin 7291779 vom 2026-10-08external
IBM Security Bulletin 7291780 vom 2026-10-08external
IBM Security Bulletin 7291781 vom 2026-10-08external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan