Skip to content
Critical Vulnerabilities Found in IBM App Connect Enterprise

Critical Vulnerabilities Found in IBM App Connect Enterprise

First seen 10 Nov 2026, 12:13 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 12:15 UTC
  • •IBM App Connect Enterprise has critical vulnerabilities allowing code execution.
  • •Patches are available for affected versions, but no active exploitation confirmed.
  • •Multiple high-severity vulnerabilities also affect IBM QRadar SIEM and other products.

IBM's App Connect Enterprise integration software has multiple vulnerabilities, including two critical flaws in the Handlebars template engine (CVE-2026-106445, CVE-2026-106446) that allow attackers to execute malicious code. These vulnerabilities require specially crafted objects or templates to exploit. Other high-severity vulnerabilities exist in Apache Thrift and Axios, which could lead to service disruptions or unauthorized data access. IBM has released patches in versions 12.0.12.31 and 13.0.9.1 to address these issues. As of now, there is no indication that these vulnerabilities are being in the wild. The Log Source Management App for IBM QRadar SIEM is also affected by five vulnerabilities, four rated high. The vulnerabilities were disclosed in various advisories, with some having public proof-of-concept code available.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 1h ago How this analysis works

Timeline

2026-10-06
Critical vulnerabilities disclosed
CVE-2026-106445 and CVE-2026-106446 were published, allowing code execution via Handlebars.
Heise.De
2026-10-06
CVE-2026-106445 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-06
CVE-2026-106446 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-20
High-severity CVE published
CVE-2026-111767 was disclosed, allowing unauthorized data access in the MCP TypeScript SDK.
Heise.De

More articles in this cluster (3)

Following this threat?

Track IBM and CVE-2026-101901 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (23)

1 / 3

Common questions

What versions of IBM App Connect Enterprise are affected?
Versions prior to 12.0.12.31 and 13.0.9.1 are affected by the vulnerabilities.
Are these vulnerabilities being exploited?
Currently, there is no evidence of active exploitation in the wild.
What should organizations do?
Organizations should apply the latest patches provided by IBM to mitigate the vulnerabilities.