← Back to search

CVE-2026-92559

9.8 CRITICAL

Published 2026-10-20 · Updated 2026-10-23

AI risk analysis

Summary
IBM App Connect Enterprise is vulnerable to information disclosure due to binding to unrestricted IP addresses, allowing remote attackers to access sensitive data without authentication. This represents a critical risk as the flaw affects multiple versions and enables full data compromise.
Exploitability
Exploitation is straightforward with no prerequisites needed, as attackers can directly connect to the unrestricted network interface to obtain sensitive information.
Blast radius
The impact could be extensive across all systems running affected IBM App Connect Enterprise versions, potentially exposing confidential business data and integration endpoints to unauthorized access.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to IBM App Connect Enterprise 13.0.8.3 or later to remediate this vulnerability.
information-disclosurenetwork-bindingibm

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-1327

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.