Product

API Connect (10.0.8.9)

1 brief RSS

Unauthenticated SQL Injection in IBM API Connect (CVE-2026-9074)

IBM API Connect versions 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 are vulnerable to an unauthenticated SQL injection (CVE-2026-9074) in the password reset functionality, potentially leading to unauthorized data access or authentication bypass.

API Connect +13 sql-injection web-vulnerability critical-vulnerability api-management

1r 3t 1c 1h ago