CVE-2026-18196

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 and 12.0.1.0 through 12.0.12.30 are vulnerable to HTML injection (CWE-79). The flaw exists in the web user interface and Administration REST API due to improper output neutralization, which could allow a remote attacker to inject arbit...