CVE-2026-17440

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2026-09-04

Last modified

2026-09-04

Weaknesses

CWE-674

Affected products

• App Connect Enterprise (Ibm)
• Integration Bus For Z/os (Ibm)
• Integration Bus For Zos (Ibm)

References

• https://www.ibm.com/support/pages/node/7286372