CVE-2026-17440
Received Received - Intake

Denial of Service in IBM App Connect Enterprise

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: IBM Corporation

Description
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-17440
EUVD
EUVD-2026-71475

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
ibm app_connect_enterprise From 13.0.1.0 (inc) to 13.0.8.1 (inc)
ibm app_connect_enterprise From 12.0.1.0 (inc) to 12.0.12.28 (inc)
ibm integration_bus_for_z/os From 10.1.0.0 (inc) to 10.1.0.7 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-674 The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in IBM App Connect Enterprise and IBM Integration Bus for z/OS allows a local attacker to cause a denial of service through uncontrolled recursion. This means the system may repeatedly call itself without proper limits, consuming excessive resources and crashing the application.

Impact Analysis

If exploited, this vulnerability could cause your IBM App Connect Enterprise or IBM Integration Bus for z/OS services to become unresponsive or crash, leading to downtime and potential loss of data processing capabilities.

Mitigation Strategies

Apply the latest IBM App Connect Enterprise or IBM Integration Bus for z/OS patches immediately. Monitor for unusual system behavior like crashes or high CPU usage. Restrict local access to affected systems until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17440. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart