CVE-2026-17416 is a vulnerability in IBM App Connect Enterprise
Published on September 14, 2026
IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.
Vulnerability Analysis
CVE-2026-17416 is exploitable with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
What is a Marshaling, Unmarshaling Vulnerability?
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.
CVE-2026-17416 has been classified to as a Marshaling, Unmarshaling vulnerability or weakness.
Products Associated with CVE-2026-17416
Want to know whenever a new CVE is published for IBM App Connect Enterprise? stack.watch will email you.
Affected Versions
IBM App Connect Enterprise:- Version 13.0.1.0, <= 13.0.8.0 is affected.
- Version 12.0.1.0, <= 12.0.12.27 is affected.