Vulnerabilities CVE-2026-15435

CVE-2026-15435

Critical

Open

TLP:CLEAR

IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.

Details

CVSS Score: 9.8
EPSS Score ⓘ: 0.73%

51.2th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Jul 30, 2026
Last Modified: Jul 31, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.