CVE-2026-92559: IBM App Connect Enterprise is vulnerable to a credential exposure

Q: Which deployments are affected?

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 are identified as affected.

Q: Does exploitation require authentication or user interaction?

No. The supplied vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction.

Q: What condition enables exposure?

The issue is associated with binding to an unrestricted IP address, which can allow a remote attacker to obtain sensitive information.

Published Oct 9, 2026

Updated

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.

Other sources

IBM App Connect Enterprise could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.

— IBM

Affected Software

1 affected componentFixes available

IBM App Connect Enterprise<=13.0.1.0 - 13.0.8.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM App Connect Enterprise to a version that resolves this vulnerability.
Fixed in 13.0.9.0Patch IT50100

Event History

Oct 9, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Oct 20, 2026

CVE Published

via MITRE·09:52 PM

Data Sourced

via MITRE·09:52 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7291781

Frequently Asked Questions

Which deployments are affected?

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 are identified as affected.

Does exploitation require authentication or user interaction?

No. The supplied vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction.

What condition enables exposure?

The issue is associated with binding to an unrestricted IP address, which can allow a remote attacker to obtain sensitive information.

CVE-2026-92559: IBM App Connect Enterprise is vulnerable to a credential exposure

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or user interaction?

What condition enables exposure?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or user interaction?

What condition enables exposure?