Security Advisory
CVE-2026-9074
9.1
CRITICAL
Vulnerability Description
IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.
Published Date
July 8, 2026
Official Source
NIST NVD Advisory