CVE-2026-92559

Awaiting Analysis Awaiting Analysis - Queue

IBM App Connect Enterprise Information Disclosure Vulnerability

Publication date: 2026-10-20

Last updated on: 2026-10-23

Assigner: IBM Corporation

Description

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-23

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-92559

EUVD

EUVD-2026-106861

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	App Connect Enterprise	13.0.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1327	The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.

Attack-Flow Graph

Executive Summary

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 have a flaw where the software binds to an unrestricted IP address. This allows remote attackers to potentially access sensitive information due to improper network binding.

Detection Guidance

To detect this vulnerability, check if IBM App Connect Enterprise is binding to an unrestricted IP address. Use network scanning tools like netstat or ss to verify listening ports and IP bindings. For example, run 'netstat -tuln' or 'ss -tuln' to list all listening ports and associated IP addresses. If the service is bound to 0.0.0.0 or ::, it may be vulnerable.

Impact Analysis

This vulnerability could allow unauthorized remote access to sensitive data processed or stored by IBM App Connect Enterprise. Attackers might exploit it to steal confidential information, disrupt services, or gain control over affected systems.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations may face compliance penalties, legal consequences, and reputational damage.

Mitigation Strategies

Bind IBM App Connect Enterprise to a specific IP address instead of an unrestricted IP address to prevent remote access to sensitive information.

Hi! I’m here to help you understand CVE-2026-92559. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...