← CVE Intelligence

CVE-2026-9074

IBM API Connect SQL Injection PUBLISHED

Description (CNA)

IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.

Affected (CNA)

Vendor / productVersions
IBM / API Connectaffected 10.0.8.0 before 10.0.8.9; affected 12.0

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.