Medium severity6.8NVD Advisory· Published Nov 7, 2026· Updated Nov 7, 2026
CVE-2026-19124
CVE-2026-19124
Description
IBM API Connect 10.0.8.0 through 10.0.8.12 could allow an attacker with access to stored data to decrypt sensitive credentials due to the use of a hard-coded cryptographic key. The key protecting stored credentials is built into the product, so credentials could be decrypted if the stored data is obtained.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 10.0.8.0 - 10.0.8.12
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.