CVE-2026-18838
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and modify API configurations due to improper authentication. Identity information supplied in requests is not sufficiently verified, which could allow a caller to impersonate another user.
AI analysis
No analysis is available for this record.
The verified data on this page is complete. An analysis is only published when it passes our checks against the source record.
The sources do not list affected products or versions for this vulnerability yet.
0.7%52nd percentile
Bar shows rank among all scored CVEs.
Published
First publication at the source
Last modified
Latest change at the source
Collected
First seen by Baba Yaga Security