IBM API Connect is a technology platform tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed December 30, 2025; most recent activity December 31, 2025.
IBM API Connect is a platform for API management that enables creating, securing, publishing, and governing APIs via an API gateway, developer portal, and related tooling. Recent reports describe critical vulnerabilities in IBM API Connect that allow attackers to bypass authentication or login controls, undermining access to protected APIs and data, which constitutes a high-severity risk for organizations relying on the platform.
A critical vulnerability in IBM API Connect has been identified, allowing attackers to bypass authentication mechanisms. IBM has released interim fixes for all affected versions, urging security teams to download…