CVE-2026-75624

Received Received - Intake

IBM App Connect Enterprise Authorization Bypass Vulnerability

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: IBM Corporation

Description

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-10

Generated

2026-09-11

AI Q&A

2026-09-11

EPSS Evaluated

N/A

NVD

CVE-2026-75624

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	app_connect_enterprise	From 13.0.1.0 (inc) to 13.0.8.1 (inc)
ibm	app_connect_enterprise	From 12.0.1.0 (inc) to 12.0.12.27 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.1 and 12.0.1.0 through 12.0.12.27 have a vulnerability where a remote authenticated attacker could bypass security restrictions due to incorrect authorization mechanisms.

Impact Analysis

This vulnerability allows an attacker to bypass security restrictions, potentially gaining unauthorized access to sensitive data or performing actions they should not be able to. The high CVSS score indicates significant impact on confidentiality, integrity, and availability.

Compliance Impact

This vulnerability allows remote authenticated attackers to bypass security restrictions due to incorrect authorization, which could lead to unauthorized access to sensitive data. This may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data privacy) by enabling unauthorized exposure or modification of protected information.

Mitigation Strategies

Apply the latest security patches or updates provided by IBM for IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.1 and 12.0.1.0 through 12.0.12.27 to address the authorization bypass issue.

Hi! I’m here to help you understand CVE-2026-75624. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70