{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aibmapp_connect_enterprise/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:app_connect_enterprise:*:*:*:*:*:*:*:*","cpe:2.3:a:ibm:integration_bus:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.7,"id":"CVE-2026-81832"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["App Connect Enterprise (13.0.1.0 - 13.0.8.1, 12.0.1.0 - 12.0.12.28)","Integration Bus for z/OS (10.1.0.0 - 10.1.0.7)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","xxe","ibm","integration"],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM App Connect Enterprise and IBM Integration Bus for z/OS contain a security vulnerability in their SAP Adapter component (CVE-2026-81832). The issue is classified as an XML External Entity (XXE) injection flaw. An unauthenticated remote attacker can exploit this vulnerability by sending a maliciously crafted XML request to the affected SAP Adapter interface. Successful exploitation may lead to the disclosure of sensitive internal data, such as local configuration files or credential artifacts, or result in a denial of service (DoS) by causing the application to parse external entities that resolve to large files or infinite URI streams. The vulnerability impacts versions 13.0.1.0 through 13.0.8.1 and 12.0.1.0 through 12.0.12.28 for App Connect Enterprise, and versions 10.1.0.0 through 10.1.0.7 for IBM Integration Bus for z/OS.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this XXE vulnerability permits an attacker to bypass data confidentiality boundaries by reading unauthorized files from the server's filesystem. This can lead to the exposure of credentials, environment configuration secrets, and system metadata. Furthermore, an attacker can leverage the XML parser's resource processing to consume excessive memory or CPU cycles, leading to application downtime for legitimate users. This risk is particularly severe in enterprise environments where these integration platforms manage sensitive cross-system communication.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritize the identification and patching of all IBM App Connect Enterprise and IBM Integration Bus for z/OS instances.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade IBM App Connect Enterprise to a version outside the vulnerable range (13.0.1.0-13.0.8.1 and 12.0.1.0-12.0.12.28).\u003c/li\u003e\n\u003cli\u003eUpgrade IBM Integration Bus for z/OS SAP Adapter to a version outside the vulnerable range (10.1.0.0-10.1.0.7).\u003c/li\u003e\n\u003cli\u003eReview web application firewall logs for incoming HTTP traffic containing XML payloads with \u003ccode\u003e!ENTITY\u003c/code\u003e or \u003ccode\u003e!DOCTYPE\u003c/code\u003e declarations targeting the SAP Adapter endpoints.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-09-04T15:27:27Z","date_published":"2026-09-04T15:27:27Z","id":"https://feed.craftedsignal.io/briefs/2026-09-cve-2026-81832/","summary":"IBM App Connect Enterprise and IBM Integration Bus for z/OS SAP Adapter components are susceptible to an XML External Entity (XXE) vulnerability, potentially allowing unauthenticated information disclosure or denial of service.","title":"XML External Entity Vulnerability in IBM App Connect Enterprise and Integration Bus","url":"https://feed.craftedsignal.io/briefs/2026-09-cve-2026-81832/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:ibm:app_connect_enterprise:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}