CVE-2026-92559: IBM App Connect Enterprise is vulnerable to a credential exposure
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.
Other sources
IBM App Connect Enterprise could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM App Connect Enterpriseto a version that resolves this vulnerability.Fixed in 13.0.9.0Patch IT50100
Event History
Frequently Asked Questions
Which deployments are affected?
IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 are identified as affected.
Does exploitation require authentication or user interaction?
No. The supplied vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction.
What condition enables exposure?
The issue is associated with binding to an unrestricted IP address, which can allow a remote attacker to obtain sensitive information.