PT-2026-66485 · Ibm · Ibm App Connect Enterprise

CVE-2026-14522 · Published 2026-07-30 · Updated 2026-07-30

NVD

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-14522

Affected Products

Ibm App Connect Enterprise

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-14522 · Security Note
• https://ibm.com/support/pages/node/7281897 · Patch, Vendor Advisory