IBM Integration Bus und IBM App Connect Enterprise: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM Integration Bus und IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-32089 linked CVEs
Open advisory with all CVEs
More on Integration
Other advisories
- Not ratedosv:CLEANSTART-2026-XM90645In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found
- Not ratedosv:CLEANSTART-2026-GM17380In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found
- Not ratedosv:CLEANSTART-2025-FI55588LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server
- Not ratedosv:CLEANSTART-2026-NN52240In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found
- Not ratedosv:CVE-2026-61826Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery
- CriticalCVE-2026-93327Google Cloud Application Integration: Deserialisierung nicht vertrauenswürdiger Daten
- CriticalCVE-2026-93327Google Cloud Application Integration: Deserialisierung nicht vertrauenswürdiger Daten
- Not ratedosv:CLEANSTART-2026-ZM16945When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and t...
Other news entries
- Critical Rails Bug Threatens to Derail Vulnerable ServersNewsDark Reading
- GitBook breach: SSO flaw led to production access; all API tokens revoked, rotate integration secretsBreachpwn.watch
- Whatever happened to the 36-month IT security roadmap?NewsCSO Online
- NCSC-2026-0356 [1.00] [M/H] Kwetsbaarheden verholpen in diverse SAP-productenNewsNCSC-NL
- Webinar: The forgotten Google Workspace access that can lead to a breachEventBleepingComputer
- Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That MeansNewsThe Hacker News
- Legacy Lenovo login opens 5,000 Dropbox accounts to attackersNewsThe Register — Security
- GreyNoise + CrowdStrike: Real-Time Edge Intelligence in Falcon Next-Gen SIEM and Charlotte Agentic SOARNewsGreyNoise
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3208
ID