CVE-2026-15435 — IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send…
Published: 2026-07-30 · CVSS: 9.8 · CVSS 3.1
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7