Vulnerability Details CVE-2026-18194
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to perform unauthorized actions due to missing anti-clickjacking controls.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 1.2%
CVSS Severity
CVSS v3 Score 2.5
Products affected by CVE-2026-18194
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.1.0
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.1.1
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.2.0
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.2.1
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.2.2
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.3.0
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.3.1
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.4.0
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.4.1
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.4.2
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.5.0
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.5.1
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.5.2
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.6.0
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.6.1
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.6.2
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.7.0
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.7.1
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.7.2
-
cpe:2.3:a:ibm:app_connect_enterprise:13.0.8.0