{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aibmapp_connect_enterprise13.0.8.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:app_connect_enterprise:13.0.1.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:app_connect_enterprise:13.0.8.2:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-92559"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["App Connect Enterprise (13.0.1.0-13.0.8.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 contain a security vulnerability (CVE-2026-92559) that allows a remote attacker to gain unauthorized access to sensitive information. The issue arises from the application binding its internal or administrative services to an unrestricted network interface, such as 0.0.0.0, instead of limiting them to a local loopback address or a specific management interface.\u003c/p\u003e\n\u003cp\u003eThis misconfiguration makes services that were intended to be internal accessible to remote actors who can route packets to the vulnerable host. An attacker could potentially probe these exposed interfaces to extract configuration data, operational details, or other sensitive information processed by the integration engine. Organizations utilizing these versions should verify their network listener configurations and apply the necessary patches provided by IBM.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for unauthorized information disclosure, potentially exposing internal configuration parameters and sensitive operational data. In enterprise integration environments, this information could assist attackers in further internal reconnaissance or facilitate secondary attacks against integrated systems.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReview all running instances of IBM App Connect Enterprise to determine if they fall within the 13.0.1.0 through 13.0.8.2 version range.\u003c/li\u003e\n\u003cli\u003eAudit network listener configurations for all integration nodes to ensure administrative and internal services are not bound to external-facing interfaces.\u003c/li\u003e\n\u003cli\u003eApply the security update from IBM to resolve CVE-2026-92559 across all impacted infrastructure.\u003c/li\u003e\n\u003cli\u003eImplement firewall rules or host-based access control lists (ACLs) to restrict access to the ports utilized by App Connect Enterprise management services, ensuring only authorized source IPs can communicate with these endpoints.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-21T00:17:14Z","date_published":"2026-10-21T00:17:14Z","id":"https://feed.craftedsignal.io/briefs/2026-10-ibm-app-connect-enterprise-info-disclosure/","summary":"IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 suffer from an information disclosure vulnerability caused by services binding to unrestricted IP addresses.","title":"IBM App Connect Enterprise: Information disclosure via unrestricted IP binding (CVE-2026-92559)","url":"https://feed.craftedsignal.io/briefs/2026-10-ibm-app-connect-enterprise-info-disclosure/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:ibm:app_connect_enterprise:13.0.8.2:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}