CVE-2026-9074

No fix known EPSS <1%CVSS 9.1

IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.

Published 2026-07-08 · CVE record · OSV

Products: ibm api_connect