CVE-2026-18196

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 and 12.0.1.0 through 12.0.12.30 are vulnerable to HTML injection (CWE-79). The flaw exists in the web user interface and Administration REST API due to improper output neutralization, which could allow a remote attacker to inject arbit...

CVE-2026-18195

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 and 12.0.1.0 through 12.0.12.30 are vulnerable to content spoofing. The flaw stems from improper output encoding of error messages , which falls under CWE-79 (Improper Neutralization of Input During Web Page Generation). A remote attac...

Security Bulletin: IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection (CVE-2026-18196 & CVE-2026-18195)

Summary IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection. Vulnerability Details CVEID:CVE-2026-18196 DESCRIPTION: IBM App Connect Enterprise could allow a remote attacker to inject arbitrary HTML due to improper output neutralization...