IBM App Connect Enterprise Critical Vulnerabilities

CERT-Bund has released a security advisory (WID-SEC-2026-0895) detailing critical vulnerabilities affecting IBM App Connect Enterprise. The vulnerabilities, rated with a CVSS base score of 9.8, allow for remote attacks including file manipulation, denial of service, arbitrary code execution, and cross-site scripting. Affected versions include IBM App Connect Enterprise <11.6.0, <12.21.0, and LTS <12.0.22, running on Linux, UNIX, and Windows operating systems.

Organizations using vulnerable versions of IBM App Connect Enterprise must apply available mitigations immediately to address these critical security risks. Failure to do so could result in severe system compromise, including unauthorized code execution and data manipulation. The advisory indicates that mitigations are available, and users should consult IBM's security advisories for specific patching and remediation steps.