CVE-2026-114468
Awaiting Analysis
Awaiting Analysis - Queue
IBM App Connect Operator Administrative Command Execution
Vulnerability report for CVE-2026-114468, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-13
Last updated on: 2026-11-13
Assigner: IBM Corporation
Description
Description
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| IBM | App Connect Operator | From 12.1.0 (inc) to 12.21.0 (inc) |
| IBM | App Connect Operator | From 12.0.0 (inc) to 12.0.28 (inc) |
| IBM | App Connect Operator | From 13.0.0 (inc) to 13.6.0 (inc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-798 | The product contains hard-coded credentials, such as a password or cryptographic key. |
