CVSS 2.5 (low) · published 2026-11-08
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to perform unauthorized actions due to missing anti-clickjacking controls.
Affected products (NVD): ibm app_connect_enterprise
Fixed in (NVD): 13.0.9.0
Weakness: CWE-1021
Source: NVD CVE-2026-18194
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.