Known Vulnerabilities for Api Connect by Ibm
Listed below are 10 of the newest known vulnerabilities associated with "Api Connect" by "Ibm".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104873 json | LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Pyt... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104854 json | Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix domain ... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104058 json | Podgrab contains a missing authentication vulnerability in which the /ws WebSocket route is registered on the root gin engine... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103758 json | Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP server... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-102669 json | Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages. | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-102508 json | Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X (PL... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-101898 json | Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does n... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-101084 json | obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated us... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-101063 json | Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authenticat... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-100868 json | Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-... | Not Provided | 2026-09-27 | 2026-09-28 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Api Connect | 5.0.8.9 | |||
| Application | Ibm | Api Connect | 5.0.8.8 | |||
| Application | Ibm | Api Connect | 5.0.8.74 | |||
| Application | Ibm | Api Connect | 5.0.8.73 | |||
| Application | Ibm | Api Connect | 5.0.8.7 | |||
| Application | Ibm | Api Connect | 5.0.8.6 | |||
| Application | Ibm | Api Connect | 5.0.8.5 | |||
| Application | Ibm | Api Connect | 5.0.8.4 | |||
| Application | Ibm | Api Connect | 5.0.8.3 | |||
| Application | Ibm | Api Connect | 5.0.8.2 | |||
| Application | Ibm | Api Connect | 5.0.8.101 | |||
| Application | Ibm | Api Connect | 5.0.8.10 | |||
| Application | Ibm | Api Connect | 5.0.8.1 | |||
| Application | Ibm | Api Connect | 5.0.8.0 | |||
| Application | Ibm | Api Connect | 5.0.7.2 | |||
| Application | Ibm | Api Connect | 5.0.7.1 | |||
| Application | Ibm | Api Connect | 5.0.7.0 | |||
| Application | Ibm | Api Connect | 5.0.6.6 | |||
| Application | Ibm | Api Connect | 5.0.6.5 | |||
| Application | Ibm | Api Connect | 5.0.6.4 |