Unrated severityNVD Advisory· Published Jul 8, 2026· Updated Jul 9, 2026
IBM API Connect SQL Injection
CVE-2026-9074
Description
IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.
Affected products
1- Range: 10.0.8.0-10.0.8.9, 12.1.0.0-12.1.0.3
Patches
Vulnerability mechanics
References
2- www.ibm.com/support/pages/node/7278218mitrevendor-advisorypatch
- www.ibm.com/support/pages/node/7278909mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.