IBM App Connect Enterprise Critical Vulnerabilities CVSS 9.8

CERT-Bund published advisory WID-SEC-2026-0933 warning of multiple critical vulnerabilities in IBM App Connect Enterprise software (versions below 13.0.7.0). The CVSS 9.8 score indicates the highest severity level. Affected platforms include UNIX, Windows, and other operating systems. An attacker can exploit these vulnerabilities to bypass security controls, manipulate data, disclose confidential information, cause denial-of-service conditions, or execute other unspecified attacks.

Organizations running IBM App Connect Enterprise must verify their installed version and upgrade to 13.0.7.0 or later as the primary mitigation. All deployments across UNIX, Windows, and other platforms should be patched immediately given the remote exploit capability and critical severity. Review CVE references for complete vulnerability details and apply vendor-provided security updates.