CVE-2026-19129

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a flaw where the identity of the backup server is not verified when establishing secure connections for analytics backups. This improper certificate validation (CWE-295) allows a network-positioned...

EUVD-2026-118800

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a network-positioned attacker to intercept backup data due to improper verification of the backup server's identity. The identity of the backup server is not verified when the secure connection for analytics...