Remote Code Execution Risk in IBM App Connect Enterprise by IBM
CVE-2026-18194

2.5LOW

Key Information:

Vendor

IBM
Status
App Connect Enterprise
Vendor
CVE Published:
8 November 2026

What is CVE-2026-18194?

A security oversight in IBM App Connect Enterprise versions from 13.0.1.0 to 13.0.8.2 could enable remote attackers to carry out unauthorized actions. The absence of vital anti-clickjacking measures leaves systems exposed to potential manipulation, prompting an urgent need for users to evaluate their security posture and implement necessary updates. For further details and remediation steps, consult the vendor's advisory.

Affected Version(s)

App Connect Enterprise 13.0.1.0 <= 13.0.8.2

References

https://www.ibm.com/support/pages/node/7291780
vendor-advisorypatch

CVSS V3.1

Score:
2.5
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.