CVE-2026-19124 | BDVDB-2026-401536 Detail

Description#

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow an attacker with access to stored data to decrypt sensitive credentials due to the use of a hard-coded cryptographic key. The key protecting stored credentials is built into the product, so credentials could be decrypted if the stored data is obtained.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-11-07Record published in the CVE List.
2. Version 22026-11-08Most recent update recorded in the CVE List.