NetSight
high8.8

CVE-2026-14522

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improp…

Impact

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.

Affected products

VendorProductAffected versions
IbmApp Connect Enterprise
from 12.0.1.0 before 12.0.12.28
from 13.0.1.0 before 13.0.8.0

Weakness classification

References