IBM App Connect Enterprise 13.x Auth Bypass via Incorrect Authorization
CVE-2026-75624 Published on September 10, 2026
IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Service
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization.
Vulnerability Analysis
CVE-2026-75624 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
What is an AuthZ Vulnerability?
The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
CVE-2026-75624 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2026-75624
Want to know whenever a new CVE is published for IBM App Connect Enterprise? stack.watch will email you.
Affected Versions
IBM App Connect Enterprise:- Version 13.0.1.0, <= 13.0.8.1 is affected.
- Version 12.0.1.0, <= 12.0.12.27 is affected.