CVE-2026-3144

IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized access to the application before the system enforces a credential update.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - psirt@us.ibm.com

Published

2026-07-08

Last modified

2026-10-25

Weaknesses

CWE-1392

Affected products

• Api Connect (Ibm)

References

• https://www.ibm.com/support/pages/node/7278909