Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-14522

IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM App Connect Enterprise

  • 13.0.1.0 to ≤ 13.0.7.2affected
  • 12.0.1.0 to ≤ 12.0.12.27affected

References