Denial of Service Vulnerability in IBM App Connect Enterprise and Integration Bus
CVE-2026-16180

5.7MEDIUM

Key Information:

Vendor

IBM
Status
App Connect Enterprise
Integration Bus For Z/os
Vendor
CVE Published:
4 September 2026

What is CVE-2026-16180?

The vulnerability in IBM App Connect Enterprise and IBM Integration Bus for z/OS enables authenticated users to exploit weaknesses in XML entity validation. This exploitation can lead to a denial-of-service condition, impacting the availability of services and potentially leading to disruptions in operations. Users should apply the necessary patches to mitigate this risk as outlined in IBM’s advisory.

Affected Version(s)

App Connect Enterprise 13.0.1.0 <= 13.0.8.1

App Connect Enterprise 12.0.1.0 <= 12.0.12.28

Integration Bus for z/OS 10.1.0.0 <= 10.1.0.7

References

https://www.ibm.com/support/pages/node/7286372
vendor-advisorypatch

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.