CVE-2026-78543
Received Received - Intake

Denial of Service in IBM App Connect Enterprise

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: IBM Corporation

Description
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infinite loop.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-78543
EUVD
EUVD-2026-71400

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
ibm app_connect_enterprise From 13.0.1.0 (inc) to 13.0.8.1 (inc)
ibm app_connect_enterprise From 12.0.1.0 (inc) to 12.0.12.28 (inc)
ibm integration_bus_for_z/os From 10.1.0.0 (inc) to 10.1.0.7 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-835 The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a denial of service issue in IBM App Connect Enterprise and IBM Integration Bus for z/OS. It allows a remote attacker to cause an infinite loop, which can disrupt normal operations by consuming excessive system resources.

Impact Analysis

The vulnerability can lead to service disruptions, causing applications to become unresponsive or crash. This may result in downtime, degraded performance, and potential loss of data or connectivity for users relying on these IBM products.

Mitigation Strategies

Apply the latest IBM App Connect Enterprise or IBM Integration Bus for z/OS patches immediately. Monitor network traffic for unusual patterns indicating infinite loops. Restrict access to vulnerable systems via firewalls or network segmentation until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-78543. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart