← Database

CVE-2026-9074

CRITICAL CVSS: 9.1 Published: 2026-07-08 Modified: 2026-07-10

Description

IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.

Affected Platforms

Ibm Api Connect

Weakness Type

CWE-89

References