CVE-2026-92559Critical· 9.8▾ MidnightIBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.
app_connect_enterprise >= 13.0.1.0 <= 13.0.8.2IBM strongly recommends addressing the vulnerability/vulnerabilities now by applying the appropriate fix to IBM App Connect Enterprise
Affected Product(s)Version(s)APARRemediation / Fixes IBM App Connect Enterprise13.0.1.0 - 13.0.8.2IT50100
The APAR (IT50100) is available from
IBM App Connect Enterprise v13- Fix Pack Release 13.0.9.0 https://www.ibm.com/support/pages/download-ibm-app-connect-enterprise-13090
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-17416High· 7.8IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.
CVE-2026-17133High· 7.8IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-17156High· 7.8IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.
CVE-2026-94402Medium· 6.1IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation
CVE-2026-93888High· 7.8IBM Sterling Connect:Direct for Unix Buffer Overflow
CVE-2026-82891High· 8.1IBM Guardium Data Protection is affected by a security vulnerability